Bug 87211

Summary:	net-misc/netkit-telnetd buffer overflows
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:	B2 [glsa] jaervosz
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-03-29 21:19:20 UTC

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Tue, 29 Mar 2005 11:10:01 +0200
Source: netkit-telnet
Binary: telnetd telnet
Architecture: source i386
Version: 0.17-28
Distribution: unstable
Urgency: high
Maintainer: Alberto Gonzalez Iniesta <agi@inittab.org>
Changed-By: Alberto Gonzalez Iniesta <agi@inittab.org>
Description: 
 telnet     - The telnet client
 telnetd    - The telnet server
Changes: 
 netkit-telnet (0.17-28) unstable; urgency=high
 .
   * telnet/telnet.cc: Fixed buffer overflow in the handling of the
     LINEMODE suboptions in telnet clients (CAN-2005-0469).
     Thanks Martin 'Joey' Schulze for the patch.
Files: 
 e524a9c88fd2493f58445ae9e2690f39 601 net standard netkit-telnet_0.17-28.dsc
 32dfff6939e2c3e0d5fa727440b4085d 25764 net standard netkit-telnet_0.17-28.diff.gz
 95e3e22edb2832a2bef10eafecdbe140 64124 net standard telnet_0.17-28_i386.deb
 ccd5d36123dcb324857427869154dd3e 40992 net optional telnetd_0.17-28_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCSRyVxRSvjkukAcMRAv7fAJ0X/lTf4XLtJwzsJk2ECnGq6mWgwgCePC5M
sIJVAEsr0Ain1xKsUCRwOWc=
=62xg
-----END PGP SIGNATURE-----

Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-03-29 21:23:16 UTC

Solar added netkit-telnetd-0.17-r6.ebuild with -28 patch update from deb.

Arches please test and mark stable. Target keywords are:

netkit-telnetd-0.17-r6: x86 ppc sparc mips alpha hppa amd64 ppc64

Comment 2 Olivier Crete (RETIRED) gentoo-dev

2005-03-29 21:41:34 UTC

x86 stable

Comment 3 Jochen Maes (RETIRED) gentoo-dev

2005-03-29 22:26:38 UTC

stable on ppc

Comment 4 Markus Rothe (RETIRED) gentoo-dev

2005-03-29 23:07:53 UTC

stable on ppc64

Comment 5 Danny van Dyk (RETIRED) gentoo-dev

2005-03-30 00:15:40 UTC

stable on amd64.

Comment 6 Gustavo Zacarias (RETIRED) gentoo-dev

2005-03-30 05:32:56 UTC

sparc stable.

Comment 7 Bryan Østergaard (RETIRED) gentoo-dev

2005-03-30 11:11:30 UTC

Stable on alpha.

Comment 8 Guy Martin (RETIRED) gentoo-dev

2005-03-30 23:44:35 UTC

Stable on hppa.

Comment 9 Thierry Carrez (RETIRED) gentoo-dev

2005-03-31 03:37:04 UTC

GLSA 200503-36
mips should mark stable to benefit from GLSA

Comment 10 Hardave Riar (RETIRED) gentoo-dev

2005-04-03 04:35:16 UTC

Stable on mips.