Summary: | <www-apps/bugzilla-{3.4.12,3.6.6}: Multiple Vulnerabilities (CVE-2011-{2977,2978}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Agostino Sarubbo <ago> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | major | CC: | idl0r, web-apps |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://secunia.com/advisories/45501/ | ||
Whiteboard: | B3 [glsa] | ||
Package list: | Runtime testing required: | --- |
Description
Agostino Sarubbo
2011-08-22 17:33:46 UTC
3.4.12 and 3.6.6 are in the tree now. (In reply to comment #1) > 3.4.12 and 3.6.6 are in the tree now. Thank you. Arches, please test and mark stable: =www-apps/bugzilla-3.6.6 Target keywords : "amd64 x86" amd64 ok + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> Test-use-ok-0.02.ebuild: + Marked stable on AMD64 as a dependency of www-apps/bugzilla-3.6.6 based on + arch testing by Agostino "ago" Sarubbo in security bug #380255. + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> Module-Find-0.10.ebuild: + Marked stable on AMD64 as a dependency of www-apps/bugzilla-3.6.6 based on + arch testing by Agostino "ago" Sarubbo in security bug #380255. + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> + Crypt-Random-Source-0.70.ebuild: + Marked stable on AMD64 as a dependency of www-apps/bugzilla-3.6.6 based on + arch testing by Agostino "ago" Sarubbo in security bug #380255. + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> + Math-Random-ISAAC-XS-1.4.ebuild: + Marked stable on AMD64 as a dependency of www-apps/bugzilla-3.6.6 based on + arch testing by Agostino "ago" Sarubbo in security bug #380255. + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> Math-Random-ISAAC-1.4.ebuild: + Marked stable on AMD64 as a dependency of www-apps/bugzilla-3.6.6 based on + arch testing by Agostino "ago" Sarubbo in security bug #380255. + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> Math-Random-Secure-0.60.ebuild: + Marked stable on AMD64 as a dependency of www-apps/bugzilla-3.6.6 based on + arch testing by Agostino "ago" Sarubbo in security bug #380255. + 26 Aug 2011; Tony Vroon <chainsaw@gentoo.org> bugzilla-3.6.6.ebuild: + Marked stable on AMD64 based on arch testing by Agostino "ago" Sarubbo in + security bug #380255. x86 stable Thanks all, request for glsa vote. Thanks, everyone. GLSA Vote: no. Vote: yes. GLSA vote: YES, request filed. This issue was resolved and addressed in GLSA 201110-03 at http://security.gentoo.org/glsa/glsa-201110-03.xml by GLSA coordinator Stefan Behte (craig). |