group.of.nepali.translators team mailing list archive

[LocutusOfBorg <costamagnagianfranco@xxxxxxxx>]

** Changed in: borgbackup (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1717666

Title:
  borgbackup: multiple security issues

Status in borgbackup package in Ubuntu:
  Fix Released
Status in borgbackup source package in Xenial:
  New
Status in borgbackup source package in Zesty:
  New

Bug description:
  [Impact]
  * Security issues before borg 1.0.9
  CVE-2016-10100
  CVE-2016-10099

  [Test Case]
  * such CVEs might lead to archive overwrite, and a backup loss.

  [Regression Potential]
   * None, we have a testsuite to catch such issues.

  This release has been in debian testing and artful since a month or two, and no regressions have been found.
  1.0.x branches are just for bug-fixes, and the testsuite is run during build and autopkgtesting.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/borgbackup/+bug/1717666/+subscriptions