<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>154322</bug_id>
          
          <creation_ts>2006-11-07 00:32 0000</creation_ts>
          <short_desc>net-dns/avahi netlink issue (CVE-2006-5461)</short_desc>
          <delta_ts>2006-11-20 12:59:15 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Security</product>
          <component>Vulnerabilities</component>
          <version>unspecified</version>
          <rep_platform>All</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          <bug_file_loc>http://avahi.org/milestone/Avahi 0.6.15</bug_file_loc>
          <status_whiteboard>B3? [glsa]</status_whiteboard>
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>jaervosz@gentoo.org</reporter>
          <assigned_to>security@gentoo.org</assigned_to>
          <cc>swegener@gentoo.org</cc>

      

      
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-11-07 00:32:56 0000</bug_when>
            <thetext>Check that netlink messages actually originate from the kernel and not another process.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2006-11-09 07:01:34 0000</bug_when>
            <thetext>*** Bug 154563 has been marked as a duplicate of this bug. ***</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2006-11-09 07:04:18 0000</bug_when>
            <thetext>arches, pls test avahi-0.6.15 and mark stable if possible</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dertobi123@gentoo.org</who>
            <bug_when>2006-11-09 07:40:29 0000</bug_when>
            <thetext>ppc stable, adding arches *cough*</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>gustavoz@gentoo.org</who>
            <bug_when>2006-11-09 10:12:47 0000</bug_when>
            <thetext>sparc stable.
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>fauli@gentoo.org</who>
            <bug_when>2006-11-10 01:20:52 0000</bug_when>
            <thetext>Broadcasting on x86</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>dang@gentoo.org</who>
            <bug_when>2006-11-10 10:16:18 0000</bug_when>
            <thetext>amd64 done.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>killerfox@gentoo.org</who>
            <bug_when>2006-11-13 12:12:12 0000</bug_when>
            <thetext>stable on hppa</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>kloeri@gentoo.org</who>
            <bug_when>2006-11-14 09:33:44 0000</bug_when>
            <thetext>Stable on Alpha.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>corsair@gentoo.org</who>
            <bug_when>2006-11-15 05:22:20 0000</bug_when>
            <thetext>ppc64 stable. sorry for being late.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2006-11-15 12:52:28 0000</bug_when>
            <thetext>security please vote on GLSA publication</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-11-15 21:24:31 0000</bug_when>
            <thetext>I tend to vote YES.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>vorlon@gentoo.org</who>
            <bug_when>2006-11-16 03:17:26 0000</bug_when>
            <thetext>so do I

one full vote still missing</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>frilled@gentoo.org</who>
            <bug_when>2006-11-16 03:38:12 0000</bug_when>
            <thetext>Take this, then .-)
</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>jaervosz@gentoo.org</who>
            <bug_when>2006-11-20 12:59:15 0000</bug_when>
            <thetext>GLSA 200611-13</thetext>
          </long_desc>
      
    </bug>

</bugzilla>