Bug#772794: qpid-cpp: Multiple security issues

2015-02-01 Thread Moritz Muehlenhoff
On Thu, Dec 11, 2014 at 08:10:00AM +0100, László Böszörményi (GCS) wrote:
 Hi Moritz,
 
 On Thu, Dec 11, 2014 at 7:50 AM, Moritz Muehlenhoff j...@inutil.org wrote:
  The version in sid is fairly old and several security issues have
  piled up. The Red Hat bugs provides more information:
  You are right. Investigating. But as you mentioned, it's only in Sid
 and doesn't affect Jessie. Packaging the latest version should be the
 best path.

Two additional issues have been reported:

CVE-2015-0223:
http://mail-archives.us.apache.org/mod_mbox/www-announce/201501.mbox/%3c54c604a8.5090...@apache.org%3E

CVE-2015-0224:
http://mail-archives.us.apache.org/mod_mbox/www-announce/201501.mbox/%3c54c60497.5060...@apache.org%3E

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#772794: qpid-cpp: Multiple security issues

2014-12-10 Thread Moritz Muehlenhoff
Package: qpid-cpp
Severity: grave
Tags: security

The version in sid is fairly old and several security issues have
piled up. The Red Hat bugs provides more information:

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0212
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4460
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4459
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4458
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4446
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3629

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#772794: qpid-cpp: Multiple security issues

2014-12-10 Thread GCS
Hi Moritz,

On Thu, Dec 11, 2014 at 7:50 AM, Moritz Muehlenhoff j...@inutil.org wrote:
 The version in sid is fairly old and several security issues have
 piled up. The Red Hat bugs provides more information:
 You are right. Investigating. But as you mentioned, it's only in Sid
and doesn't affect Jessie. Packaging the latest version should be the
best path.

Thanks,
Laszlo/GCS


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#772794: qpid-cpp: Multiple security issues

2014-12-10 Thread Moritz Muehlenhoff
On Thu, Dec 11, 2014 at 08:10:00AM +0100, László Böszörményi (GCS) wrote:
 Hi Moritz,
 
 Packaging the latest version should be the
 best path.

Agreed.

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org