[Bug 1668781] Re: Sync atheme-services 7.2.9-1 (universe) from Debian unstable (main)

Jeremy Bicha jeremy at bicha.net
Wed Mar 1 02:34:03 UTC 2017


This bug was fixed in the package atheme-services - 7.2.9-1
Sponsored for Unit 193 (unit193)

---------------
atheme-services (7.2.9-1) unstable; urgency=medium

  * new upstream release (7.2.8) fixing security issue "saslserv/main: free
    sasl_sourceinfo_t after use" see:
    https://github.com/atheme/atheme/pull/539
  * new upstream release (7.2.9) fixing security issue introduced in
    7.2.8: "Fix use after free during impersonation" (Closes: #855588)
  * remove two OpenSSL 1.1 patches merged upstream

  [ Jos Ahrens ]
  * email templates: Fix leading whitespace

  [ Aaron Jones ]
  * atheme.conf.example: better highlight the pbkdf2v2 crypto module
  * pbkdf2v2: make digest and rounds configurable at runtime
  * memoserv: let user know (on identify and /away) when their inbox is full
  * memoserv: unregister hooks when unloading

 -- Antoine Beaupré <anarcat at debian.org>  Tue, 07 Feb 2017 21:01:27
-0500

** Changed in: atheme-services (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1668781

Title:
  Sync atheme-services 7.2.9-1 (universe) from Debian unstable (main)

Status in atheme-services package in Ubuntu:
  Fix Released

Bug description:
  Please sync atheme-services 7.2.9-1 (universe) from Debian unstable
  (main)

  Please note, 7.2.8 and 7.2.9 fix security issues.

  Changelog entries since current zesty version 7.2.7-1:

  atheme-services (7.2.9-1) unstable; urgency=medium

    * new upstream release (7.2.8) fixing security issue "saslserv/main: free
      sasl_sourceinfo_t after use" see:
      https://github.com/atheme/atheme/pull/539
    * new upstream release (7.2.9) fixing security issue introduced in
      7.2.8: "Fix use after free during impersonation" (Closes: #855588)
    * remove two OpenSSL 1.1 patches merged upstream

    [ Jos Ahrens ]
    * email templates: Fix leading whitespace

    [ Aaron Jones ]
    * atheme.conf.example: better highlight the pbkdf2v2 crypto module
    * pbkdf2v2: make digest and rounds configurable at runtime
    * memoserv: let user know (on identify and /away) when their inbox is full
    * memoserv: unregister hooks when unloading

   -- Antoine Beaupré <anarcat at debian.org>  Tue, 07 Feb 2017 21:01:27
  -0500

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/atheme-services/+bug/1668781/+subscriptions



More information about the Ubuntu-sponsors mailing list