group.of.nepali.translators team mailing list archive

[Thomas Ward <teward@xxxxxxxxxxxxxxx>]

Artful reaches End of Life on July 19th.  Due to this being in two days,
and under the advisement of the Security Team, a patch will not be
available by the EOL date.  Marking "Won't Fix" for Artful only.

** Changed in: znc (Ubuntu Trusty)
       Status: New => Confirmed

** Changed in: znc (Ubuntu Trusty)
       Status: Confirmed => In Progress

** Changed in: znc (Ubuntu Xenial)
       Status: New => In Progress

** Changed in: znc (Ubuntu Bionic)
       Status: New => In Progress

** Changed in: znc (Ubuntu Artful)
       Status: New => Won't Fix

** Changed in: znc (Ubuntu Trusty)
     Assignee: (unassigned) => Thomas Ward (teward)

** Changed in: znc (Ubuntu Xenial)
     Assignee: (unassigned) => Thomas Ward (teward)

** Changed in: znc (Ubuntu Bionic)
     Assignee: (unassigned) => Thomas Ward (teward)

** Changed in: znc (Ubuntu Trusty)
   Importance: Undecided => Medium

** Changed in: znc (Ubuntu Xenial)
   Importance: Undecided => Medium

** Changed in: znc (Ubuntu Artful)
   Importance: Undecided => Medium

** Changed in: znc (Ubuntu Bionic)
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1781925

Title:
  Vulnerabilities in znc package CVE-2018-14055 CVE-2018-14056

Status in znc package in Ubuntu:
  In Progress
Status in znc source package in Trusty:
  In Progress
Status in znc source package in Xenial:
  In Progress
Status in znc source package in Artful:
  Won't Fix
Status in znc source package in Bionic:
  In Progress
Status in znc source package in Cosmic:
  In Progress

Bug description:
  Multiple remote vulnerabilities reported in ZNC package:
  CVE-2018-14055, CVE-2018-14056

  Debian LTS has updates available:
  http://www.linuxsecurity.com/content/view/213083?rdf

  Relevant patches in znc git:

  https://github.com/znc/znc/commit/a4a5aeeb17d32937d8c7d743dae9a4cc755ce773
  https://github.com/znc/znc/commit/a7bfbd93812950b7444841431e8e297e62cb524e
  https://github.com/znc/znc/commit/d22fef8620cdd87490754f607e7153979731c69d

  Currently no updates available in Xenial, did not see any existing
  reports.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/znc/+bug/1781925/+subscriptions