Bug 556308 – <app-misc/remind-03.01.15: unspecified buffer overflow flaw

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2015-07-30 10:11:02 UTC]

From ${URL} :

An unspecified buffer overflow flaw was found in Remind, a calendar and alarm program:

http://lists.roaringpenguin.com/pipermail/remind-fans/2015/003172.html

This issue was fixed upstream in the 3.1.15 version of remind.

CVE request:

http://seclists.org/oss-sec/2015/q3/232


@maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.

[Comment 1 Jeroen Roovers (RETIRED) 2015-08-06 05:31:40 UTC]

CHANGES TO REMIND
 
* Version 3.1 Patch 15 - 2015-07-27
 
- BUG FIX: Fix a buffer overflow found by Alexander Keller
 
- BUG FIX: Fix a typo in this file: was 2014 instead of 2015.
 
- BUG FIX: Make parser reject an AT followed by more than one time.
 
- BUG FIX: Make parser reject epeated delta or *repeat values.

[Comment 2 Jeroen Roovers (RETIRED) 2015-08-06 05:32:31 UTC]

Arch teams, please test and mark stable:
=app-misc/remind-03.01.15
Targeted stable KEYWORDS : amd64 ppc x86

[Comment 3 Agostino Sarubbo 2015-08-07 08:01:57 UTC]

amd64 stable

[Comment 4 Agostino Sarubbo 2015-08-07 08:02:10 UTC]

x86 stable

[Comment 5 Agostino Sarubbo 2015-08-26 07:30:10 UTC]

ppc stable.

Maintainer(s), please cleanup.
Security, please vote.

[Comment 6 Kristian Fiskerstrand (RETIRED) 2015-10-31 16:24:57 UTC]

GLSA Vote: No

[Comment 7 Stefan Behte (RETIRED) 2015-11-09 21:54:35 UTC]

Vote: no.