Debian Bug report logs - #179338
slocate may cause buffer overflow, and new upstream version (2.7) was released

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Hideki Yamane <henrich@samba.gr.jp>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: slocate may cause buffer overflow, and new upstream version (2.7) was released

Date: Sun, 02 Feb 2003 01:38:59 +0900

Package: slocate
Version: 2.6-1.4
Severity: grave
Justification: user security hole

Dear slocate maintainer,

 I found CVE report about slocate local buffer overflow vulnerability,
 (this is now still under review) and new upstream version was released.
 (slocate 2.7)

 the report in bugtraq said this vulnerability was found under Redhat 
 system, so Debian's slocate may not be affected that, but it is better 
 that check and fix or new version release as soon as possible, I think.


-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux intoeyes 2.4.21-pre1 #1 2002ǯ 12·î 16Æü ·îÍËÆü 22:18:03 JST i686
Locale: LANG=ja_JP.eucJP, LC_CTYPE=ja_JP.eucJP

Versions of packages slocate depends on:
ii  adduser                       3.49       Add and remove users and groups
ii  dpkg                          1.10.9     Package maintenance system for Deb
ii  libc6                         2.3.1-10   GNU C Library: Shared libraries an

-- no debconf information


regards,
 Hideki Yamane <henrich@samba.gr.jp>
  Samba Users Group Japan -- http://www.samba.gr.jp

Message #14 received at 179338@bugs.debian.org (full text, mbox, reply):

From: Hideki Yamane <henrich@samba.gr.jp>

To: 179338@bugs.debian.org

Subject: CVE URI

Date: Sun, 02 Feb 2003 16:53:10 +0900

 ah, I forgot to write URI about CVE info.
 please see CAN-2003-0056
 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0056

---------
Hideki Yamane mailto:henrich@samba.gr.jp
Samba Users Group Japan  http://www.samba.gr.jp

Message #21 received at 179338-done@bugs.debian.org (full text, mbox, reply):

From: Kevin Lindsay <klindsay@debian.org>

To: 179338-done@bugs.debian.org

Subject: Closing NMU

Date: Wed, 27 Oct 2004 22:46:15 -0700

[Message part 1 (text/plain, inline)]

Closing old NMU bug.

---------------------------------------------------
Kevin Lindsay
Fingerprint: 81E 58A3 B49A 580E EE3D 8CF0 519A 55F0 746C 51F4
Key Id:      746C51F4

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.