[Sync request] Sync nas (1.8-4) from Debian unstable (main)
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| nas (Ubuntu) |
Fix Released
|
Low
|
Unassigned | ||
| Breezy |
Fix Released
|
Low
|
Kees Cook | ||
| Dapper |
Fix Released
|
Low
|
Kees Cook | ||
| Edgy |
Fix Released
|
Low
|
Kees Cook | ||
| Feisty |
Fix Released
|
Low
|
Unassigned | ||
Bug Description
Binary package hint: nas
Please sync nas (1.8-4) from Debian unstable (main).
The Ubuntu package has no changes.
The package builds cleanly in a feisty pbuilder.
Thanks.
Changelog:
nas (1.8-4) unstable; urgency=high
* High-urgency upload to fix multiple security holes (CVE-2007-1543,
CVE-2007-1544, CVE-2007-1545, CVE-2007-1546 and CVE-2007-1547):
+ accept_att_local buffer overflow through USL connection
+ server termination through unexistent ID in AddResource
+ bcopy crash caused by integer overflow in ProcAuWriteElement
+ invalid memory pointer caused by big num_actions in
ProcAuSet
+ another invalid memory pointer caused by big num_actions in
ProcAuSet
+ invalid memory pointer in compileInputs
+ exploits bug 3 in read mode (requires something playing on
the server)
+ NULL pointer caused by too much connections
+ Closes: #416038
-- Steve McIntyre <email address hidden> Mon, 26 Mar 2007 00:29:10 +0100
nas (1.8-3) unstable; urgency=medium
* Added Portuguese debconf translation, thanks to Miguel Figueiredo.
Closes: #408181.
* Added Spanish debconf translation, thanks to Steve Lord Flaubert.
Closes: #409805.
-- Steve McIntyre <email address hidden> Thu, 8 Feb 2007 00:23:46 +0000
| Kees Cook (kees) wrote | #1 |
| Changed in nas: | |
| status: | Unconfirmed → Confirmed |
| assignee: | nobody → keescook |
| importance: | Undecided → Medium |
| status: | Unconfirmed → In Progress |
| assignee: | nobody → keescook |
| status: | Unconfirmed → In Progress |
| assignee: | nobody → keescook |
| status: | Unconfirmed → In Progress |
| Changed in nas: | |
| importance: | Undecided → Medium |
| importance: | Undecided → Medium |
| importance: | Medium → Low |
| importance: | Medium → Low |
| importance: | Medium → Low |
| Kees Cook (kees) wrote | #2 |
| Changed in nas: | |
| status: | In Progress → Fix Released |
| status: | In Progress → Fix Released |
| status: | In Progress → Fix Released |
| importance: | Undecided → Low |
| Sebastien Bacher (seb128) wrote | #3 |
| Changed in nas: | |
| status: | Confirmed → Fix Released |
I'm going to be doing a full security update for nas on breezy through edgy, and feisty will need it too. Debian's changes are entirely the security fix AFAICT.