89501 2005-04-18 03:16 0000 dev-perl/Convert-UUlib New version fix security issue 2005-04-26 22:52:21 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All All RESOLVED FIXED B2? [glsa] jaervosz P2 normal --- 1 jaervosz@gentoo.org security@gentoo.org net-mail@gentoo.org perl@gentoo.org jaervosz@gentoo.org 2005-04-18 03:16:48 0000 Snippet from Changelog: 1.05 Fri Feb 25 22:50:27 CET 2005 - fix a (likely exploitable) segfault problem, (tracked down and/or reported by Mark Martinec and Robert Lewis). mcummings@gentoo.org 2005-04-18 10:25:41 0000 1.051 in the tree and ready for arch's to test. jaervosz@gentoo.org 2005-04-18 10:29:42 0000 Arches please test and mark stable. luckyduck@gentoo.org 2005-04-18 10:34:32 0000 any hints for testing? gustavoz@gentoo.org 2005-04-18 10:38:23 0000 FEATURES="maketest" emerge ... :) Most perl stuff has autotests, specially when the ebuild has SRC_TEST="do". luckyduck@gentoo.org 2005-04-18 11:10:33 0000 stable on amd64 hansmi@gentoo.org 2005-04-18 11:32:38 0000 Stable on ppc. mcummings@gentoo.org 2005-04-18 12:36:24 0000 SRC_TEST="do" is enabled by default - I can provide additional tests if you have some functionality in mind you want to test :) Unless rep's from x86 or sparc mind, I can test and bump for these platforms. mcummings@gentoo.org 2005-04-18 13:46:38 0000 Stable for x86 and sparc. kloeri@gentoo.org 2005-04-19 11:14:40 0000 Stable on alpha. jaervosz@gentoo.org 2005-04-19 12:30:32 0000 tigger/taviso could you look into this and perhaps provide a bit more detail for a GLSA? mcummings@gentoo.org 2005-04-19 13:25:58 0000 Shouldn't we get the amavis && amavisd-new maintainers on this bug? They should bump their ebuilds to specifically reflect the new version jaervosz@gentoo.org 2005-04-19 13:39:24 0000 net-mail please bump dependencies. corsair@gentoo.org 2005-04-19 23:24:13 0000 stable on ppc64 ticho@gentoo.org 2005-04-20 00:18:25 0000 Both amavis and amavisd-new bumped to use >=dev-perl/Convert-UUlib-1.051 jaervosz@gentoo.org 2005-04-21 01:27:45 0000 Upstream contacted by taviso. jaervosz@gentoo.org 2005-04-26 22:52:21 0000 GLSA 200504-26