This bug was fixed in the package python-crypto - 2.0.1+dfsg1-4ubuntu1

---------------
python-crypto (2.0.1+dfsg1-4ubuntu1) karmic; urgency=low

  * Merge from debian unstable (LP: #388002), remaining changes:
    - Install the -dbg build using --install-layout=deb.
    - The md5 module is deprecated in Python 2.6, use hashlib when possible.
    - Explicitly use python2.5 to build the docs; the old doc tools are not
      included in python2.6 anymore.

python-crypto (2.0.1+dfsg1-4) unstable; urgency=low

  * Switched to quilt patches:
    - errata-2.0.1.patch:
        Syncs the source tree to the actually released 2.0.1 tarball.
    - dfsg-adjust.patch:
        Adjusts the build system to the DFSGified source, to deal with
        the removed files.
    - aes256-55bytes.patch:
        Fixes the AES256 padding bug (Bug#474177).
    - arc2-buffer-overflow.patch:
        Fixes the ARC2 buffer overflow (Bug#516660).
    - m68k-no-O3.patch:
        Workaround GCC 4.0.1 ICE regarding -O3 on m68k. This patch is
        deactived -- hopefully this is fixed in recent GCC.
  * New patches:
    - run-tests.patch:
        Non-Debian part of the patch by Kees Cook <[email protected]>
        to run test suite during build (closes: #518202).
    - no-usr-local.patch:
        Remove #!/usr/local/bin/python shebang line from Util/RFC1751.py.
  * Run test suite during build.
  * Added ${misc:Depends}.
  * Added ${shlib:Depends} to python-crypto.
  * Restored old changelog entries, which seem to got cut off between 2.
    0.1+dfsg1-2.1 and 2.0.1+dfsg1-2.3 (by Matthias?).
  * Typo fix for python-crypto-dbg description: python -> Python.
  * Use ${binary:Version} instead of ${Source-Version}.
  * Added debian/watch.
  * Bump Standards-Version to 3.8.1:
    - Added Homepage field to debian/control.
  * Adjust copyright line in debian/copyright.
  * Move python-crypto-dbg to section 'debug'.
  * Add XB-Python-Version to python-crypto-dbg.

python-crypto (2.0.1+dfsg1-3) unstable; urgency=low

  * Acknowlege NMUs.
  * Apply fix for CVE-2009-0544 (Buffer overflow in the ARC2 module), and
    a stand-alone version of the associated testcase (see
    http://www.openwall.com/lists/oss-security/2009/02/07/1).
    Closes: #516660.

 -- Muharem Hrnjadovic <[email protected]>   Tue, 16 Jun 2009 16:15:28
+0200

** Changed in: python-crypto (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2009-0544

-- 
Please merge python-crypto_2.0.1+dfsg1-4 from debian/unstable
https://bugs.launchpad.net/bugs/388002
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to