<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>107351</bug_id>
          
          <creation_ts>2005-09-26 19:27 0000</creation_ts>
          <short_desc>app-office/abiword 2.2.10 released (fixes CAN-2005-2964)</short_desc>
          <delta_ts>2005-10-02 06:22:26 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          <status_whiteboard>B2 [glsa] jaervosz</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>mguzman@sfu.ca</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>gnome@gentoo.org</cc>
    
    <cc>jaervosz@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>mguzman@sfu.ca</who>
            <bug_when>2005-09-26 19:27:36 0000</bug_when>
            <thetext>Abiword 2.2.10 is released, which fixes a security vulnerability:

&quot;Fix security bug: AbiWord RTF import stack-based buffer overflow /
CESA-2005-004 - rev 1&quot;

AbiSource advises all users to upgrade as soon as possible</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2005-09-27 00:13:55 0000</bug_when>
            <thetext>*** Bug 106896 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2005-09-27 00:15:24 0000</bug_when>
            <thetext>gnome please advise and bump as necessary. </thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2005-09-28 04:15:55 0000</bug_when>
            <thetext>This is CAN-2005-2964</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>obz@gentoo.org</who>
            <bug_when>2005-09-28 08:53:27 0000</bug_when>
            <thetext>Added to ~arch.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2005-09-28 09:01:58 0000</bug_when>
            <thetext>Archs please test and mark stable :
Target KEYWORDS=&quot;alpha amd64 hppa ia64 ppc ppc64 sparc x86&quot;
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>fmccor@gentoo.org</who>
            <bug_when>2005-09-28 10:02:55 0000</bug_when>
            <thetext>Sparc done.  Builds and appears to run as expected.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>fmccor@gentoo.org</who>
            <bug_when>2005-09-28 10:03:23 0000</bug_when>
            <thetext>(Forgot to remove CC sparc)</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>fmccor@gentoo.org</who>
            <bug_when>2005-09-28 10:04:08 0000</bug_when>
            <thetext>(In reply to comment #7)
&gt; (Forgot to remove CC sparc)
This time for sure.  Nuts.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>hansmi@gentoo.org</who>
            <bug_when>2005-09-28 11:08:04 0000</bug_when>
            <thetext>Stable on ppc and hppa</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>metalgod@gentoo.org</who>
            <bug_when>2005-09-28 12:20:20 0000</bug_when>
            <thetext>Amd64</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>metalgod@gentoo.org</who>
            <bug_when>2005-09-28 12:21:50 0000</bug_when>
            <thetext>amd64 done</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2005-09-28 12:27:03 0000</bug_when>
            <thetext>stable on ppc64</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>fuzzyray@gentoo.org</who>
            <bug_when>2005-09-28 16:23:13 0000</bug_when>
            <thetext>Stable on x86</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>ferdy@gentoo.org</who>
            <bug_when>2005-09-29 09:22:50 0000</bug_when>
            <thetext>Stable on alpha

Cheers,
Ferdy</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>koon@gentoo.org</who>
            <bug_when>2005-09-30 03:06:22 0000</bug_when>
            <thetext>GLSA 200509-20
ia64 should mark stable to benefit from GLSA</thetext>
          </long_desc>
      
    </bug>

</bugzilla>