Bug 1103026 (CVE-2014-3864, CVE-2014-3865)
Summary: | CVE-2014-3864 CVE-2014-3865 dpkg: multiple directory traversal flaws in dpkg-source | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Murray McAllister <mmcallis> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED ERRATA | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | andrew, sergio, vanmeeuwen+fedora |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2015-05-14 11:30:09 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1103027, 1103028 | ||
Bug Blocks: |
Description
Murray McAllister
2014-05-30 05:15:39 UTC
Created dpkg tracking bugs for this issue: Affects: fedora-all [bug 1103027] Affects: epel-all [bug 1103028] I still waiting for Debian release : http://packages.qa.debian.org/d/dpkg.html seems finally they fix it : http://anonscm.debian.org/gitweb/?p=dpkg/dpkg.git;a=shortlog;h=refs/heads/wheezy after that I will try build on epel (In reply to Sergio Monteiro Basto from comment #2) > I still waiting for Debian release : > > http://packages.qa.debian.org/d/dpkg.html > > seems finally they fix it : > http://anonscm.debian.org/gitweb/?p=dpkg/dpkg.git;a=shortlog;h=refs/heads/ > wheezy > > > after that I will try build on epel That is fine, thank you for the progress update! dpkg-1.16.15-1.fc19 has been pushed to the Fedora 19 stable repository. If problems still persist, please make note of it in this bug report. dpkg-1.16.16-5.el6 has been pushed to the Fedora EPEL 6 stable repository. If problems still persist, please make note of it in this bug report. dpkg-1.16.16-5.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report. I couldn't build dpkg for el5 because DEBUG util.py:388: Error: No Package found for po4a [1] [1] https://kojipkgs.fedoraproject.org//work/tasks/5213/9525213/root.log |