newsbeuter (0.7-1ubuntu0.1) hardy-security; urgency=low
* SECURITY UPDATE: arbitrary code execution via crafted item URLS.
- src/view.cpp: Escape single quotes in item URLs. Fixes arbitrary
code execution. Patch from Debian.
- References:
+ CVE-2008-3907
Date: Sat, 27 Sep 2008 11:01:24 +1000
Changed-By: William Grant <[EMAIL PROTECTED]>
Maintainer: Ubuntu MOTU Developers <[EMAIL PROTECTED]>
https://launchpad.net/ubuntu/hardy/+source/newsbeuter/0.7-1ubuntu0.1
Format: 1.7
Date: Sat, 27 Sep 2008 11:01:24 +1000
Source: newsbeuter
Binary: newsbeuter
Architecture: amd64_translations amd64 hppa_translations hppa i386_translations
i386 ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc
source sparc_translations sparc
Version: 0.7-1ubuntu0.1
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu MOTU Developers <[EMAIL PROTECTED]>
Changed-By: William Grant <[EMAIL PROTECTED]>
Description:
newsbeuter - text mode rss feed reader with podcast support
Changes:
newsbeuter (0.7-1ubuntu0.1) hardy-security; urgency=low
.
* SECURITY UPDATE: arbitrary code execution via crafted item URLS.
- src/view.cpp: Escape single quotes in item URLs. Fixes arbitrary
code execution. Patch from Debian.
- References:
+ CVE-2008-3907
Files:
2bb426bff19e83da14b7d9561e7399b6 27163 raw-translations -
newsbeuter_0.7-1ubuntu0.1_amd64_translations.tar.gz
dc680b412fbf17e13aef922cc379385b 364214 net optional
newsbeuter_0.7-1ubuntu0.1_amd64.deb
0a6256c890eced26345207002e44d3a7 27167 raw-translations -
newsbeuter_0.7-1ubuntu0.1_hppa_translations.tar.gz
5042679a1c7a9cebc24b765d26d13418 444110 net optional
newsbeuter_0.7-1ubuntu0.1_hppa.deb
be6f38246f59bfeefb506b879eb1a3a1 27165 raw-translations -
newsbeuter_0.7-1ubuntu0.1_i386_translations.tar.gz
508433fcf20eaaa3df63fd5bb07f9557 339954 net optional
newsbeuter_0.7-1ubuntu0.1_i386.deb
9f6c4068c8913569cbe86d31b7963a63 27170 raw-translations -
newsbeuter_0.7-1ubuntu0.1_ia64_translations.tar.gz
824bc20f9fb42150552f82295adb5374 491970 net optional
newsbeuter_0.7-1ubuntu0.1_ia64.deb
3dbcc7e3c527111519490b92d00d1fda 27166 raw-translations -
newsbeuter_0.7-1ubuntu0.1_lpia_translations.tar.gz
e13ca3564a16476b9e24a50f2f15c6e9 347580 net optional
newsbeuter_0.7-1ubuntu0.1_lpia.deb
c6415420e39904a86723ff25882f908d 27165 raw-translations -
newsbeuter_0.7-1ubuntu0.1_powerpc_translations.tar.gz
c10b00ef7a7c3a1977d26d3719ec3314 354660 net optional
newsbeuter_0.7-1ubuntu0.1_powerpc.deb
c53936b99b1e2631bca13aec8d3145ac 762 net optional newsbeuter_0.7-1ubuntu0.1.dsc
f93e15e1237af16dc40a76963b1c7752 3371 net optional
newsbeuter_0.7-1ubuntu0.1.diff.gz
836ff9556cde5f942f0b0b19a4730d49 27164 raw-translations -
newsbeuter_0.7-1ubuntu0.1_sparc_translations.tar.gz
ade2f7d448b20bda24a3dab5bac32d9e 391896 net optional
newsbeuter_0.7-1ubuntu0.1_sparc.deb
Original-Maintainer: Nico Golde <[EMAIL PROTECTED]>
--
Hardy-changes mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/hardy-changes