Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2011-08-10 Thread Timo Juhani Lindfors
Hi Ritesh, is this bug kept open since it still affects squeeze? If no fix for squeeze is planned it could just be closed? -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2011-08-10 Thread Ritesh Raj Sarraf
On 08/10/2011 03:51 PM, Timo Juhani Lindfors wrote: Hi Ritesh, is this bug kept open since it still affects squeeze? If no fix for squeeze is planned it could just be closed? -Timo I don't think this affects the version in squeeze. This one can be closed. -- Ritesh Raj Sarraf RESEARCHUT

Bug#572560: Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2011-08-10 Thread Timo Juhani Lindfors
Ritesh Raj Sarraf r...@researchut.com writes: I don't think this affects the version in squeeze. This one can be closed. Ok and same probably goes for 572560? -Timo -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2011-08-10 Thread Moritz Muehlenhoff
On Wed, Aug 10, 2011 at 04:54:07PM +0530, Ritesh Raj Sarraf wrote: On 08/10/2011 03:51 PM, Timo Juhani Lindfors wrote: Hi Ritesh, is this bug kept open since it still affects squeeze? If no fix for squeeze is planned it could just be closed? -Timo I don't think this affects the

Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2011-08-10 Thread Ritesh Raj Sarraf
On 08/10/2011 10:53 PM, Moritz Muehlenhoff wrote: On what basis did you come to that conclusion? Did you validate the upstream patches against the Squeeze version? Whatever upstream had applied, part of it was overridden when we built it. I fixed this in 1.2-4 with assistance from Steve Beattie.

Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2011-08-10 Thread Timo Juhani Lindfors
Hi, Ritesh Raj Sarraf r...@researchut.com writes: Timo: This was the bug I was talking about earlier. The CVEs were CVE-2010-4170, CVE-2010-4171. And the upstream fix: http://sources.redhat.com/git/gitweb.cgi?p=systemtap.git;a=commit;h=b7565b41228bea196cefa3a7d43ab67f8f9152e2 Debian Bug:

Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2010-02-08 Thread Eugeniy Meshcheryakov
found 568809 0.0.20061028-2 found 568809 0.0.20080705-1+lenny1 found 568809 1.0-2 found 568809 1.1-1 thanks Hello, I can confirm that this bug is present in all version currently in archive (not a security bug for oldstable because it did not handle stapusr group). 7 лютого 2010 о 22:33 +0100

Bug#568809: CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

2010-02-07 Thread Moritz Muehlenhoff
Package: systemtap Severity: important Tags: security Hi Evgeniij, please see https://bugzilla.redhat.com/show_bug.cgi?id=559719 for details. This issue doesn't warrant a DSA. If the affected code is present in Lenny, if would be nice if you could fix it through a stable point update. Cheers,