Your message dated Sun, 29 Jan 2017 19:33:28 +0000
with message-id <[email protected]>
and subject line Bug#827744: fixed in bzip2 1.0.6-8.1
has caused the Debian Bug report #827744,
regarding bzip2: CVE-2016-3189: heap use after free in bzip2recover
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
827744: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827744
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: bzip2
Version: 1.0.6-4
Severity: important
Tags: security upstream patch
Hi,
the following vulnerability was published for bzip2.
CVE-2016-3189[0]:
heap use after free in bzip2recover
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2016-3189
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1319648
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: bzip2
Source-Version: 1.0.6-8.1
We believe that the bug you reported is fixed in the latest version of
bzip2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ben Hutchings <[email protected]> (supplier of updated bzip2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 29 Jan 2017 18:30:31 +0000
Source: bzip2
Binary: libbz2-1.0 libbz2-dev bzip2 bzip2-doc
Architecture: source
Version: 1.0.6-8.1
Distribution: unstable
Urgency: medium
Maintainer: Anibal Monsalve Salazar <[email protected]>
Changed-By: Ben Hutchings <[email protected]>
Description:
bzip2 - high-quality block-sorting file compressor - utilities
bzip2-doc - high-quality block-sorting file compressor - documentation
libbz2-1.0 - high-quality block-sorting file compressor library - runtime
libbz2-dev - high-quality block-sorting file compressor library - development
Closes: 827744
Changes:
bzip2 (1.0.6-8.1) unstable; urgency=medium
.
* Non-maintainer upload.
* bzip2recover: Fix potential use-after-free, Closes: #827744 (CVE-2016-3189)
Checksums-Sha1:
05e3ee8daefc87651b09c41c9f454790df0ac38b 2082 bzip2_1.0.6-8.1.dsc
d179574585850a3833300f8bee56249612bf5ca4 59875 bzip2_1.0.6-8.1.debian.tar.bz2
Checksums-Sha256:
d80deed11a1419ad090cb486dd2335850fd8719b809c32002dea04b485f55dbd 2082
bzip2_1.0.6-8.1.dsc
bdbe7bf29e014e44d79bb7c733fe63cae990ab50882a4a07867cf69c61ad72b7 59875
bzip2_1.0.6-8.1.debian.tar.bz2
Files:
7275cc6d76481ef19daa8d2e51e5456b 2082 utils important bzip2_1.0.6-8.1.dsc
b3bf7c9a957fa3a71661e45a58ab7eb0 59875 utils important
bzip2_1.0.6-8.1.debian.tar.bz2
-----BEGIN PGP SIGNATURE-----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=6tJ8
-----END PGP SIGNATURE-----
--- End Message ---
