Branches for Oneiric

Name Status Last Modified Last Commit
lp:ubuntu/oneiric/rpm bug 2 Mature 2011-07-27 11:31:52 UTC
37. * Remove useless .la files from pytho...

Author: Michal Čihař
Revision Date: 2011-07-12 20:55:42 UTC

* Remove useless .la files from python-rpm (Closes: #633267).
* Avoid linking python module with libpython (LP: #789656).
* Remove empty lines from debian/*.symbols, they cause warnings during
  build.

lp:ubuntu/oneiric-security/rpm 2 Mature 2013-01-17 22:11:54 UTC
38. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2013-01-17 12:07:16 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  crafted headers
  - debian/patches/CVE-2011-3378.patch: properly validate values in
    lib/header.c.
  - CVE-2011-3378
* SECURITY UPDATE: denial of service and possible code execution via
  invalid region tag
  - debian/patches/CVE-2012-0060.patch: validate region tags in
    lib/header.c, lib/package.c, lib/signature.c.
  - CVE-2012-0060
* SECURITY UPDATE: denial of service and possible code execution via
  large region size
  - debian/patches/CVE-2012-0061.patch: check length in lib/header.c.
  - CVE-2012-0061
* SECURITY UPDATE: denial of service and possible code execution via
  negative value in region offset
  - debian/patches/CVE-2012-0815.patch: properly handle negative values
    in lib/header.c, lib/package.c, lib/signature.c.
  - CVE-2012-0815

lp:ubuntu/oneiric-updates/rpm 2 Mature 2013-01-19 07:16:10 UTC
38. * SECURITY UPDATE: denial of service ...

Author: Marc Deslauriers
Revision Date: 2013-01-17 12:07:16 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  crafted headers
  - debian/patches/CVE-2011-3378.patch: properly validate values in
    lib/header.c.
  - CVE-2011-3378
* SECURITY UPDATE: denial of service and possible code execution via
  invalid region tag
  - debian/patches/CVE-2012-0060.patch: validate region tags in
    lib/header.c, lib/package.c, lib/signature.c.
  - CVE-2012-0060
* SECURITY UPDATE: denial of service and possible code execution via
  large region size
  - debian/patches/CVE-2012-0061.patch: check length in lib/header.c.
  - CVE-2012-0061
* SECURITY UPDATE: denial of service and possible code execution via
  negative value in region offset
  - debian/patches/CVE-2012-0815.patch: properly handle negative values
    in lib/header.c, lib/package.c, lib/signature.c.
  - CVE-2012-0815

13 of 3 results