landing-team-changes team mailing list archive

[ubuntu.landing.team@xxxxxxxxx]

Uploaded to the Stable Phone Overlay PPA (~ci-train-ppa-service/ubuntu/stable-phone-overlay vivid) archive

---------------
Format: 1.8
Date: Fri, 27 Jan 2017 09:50:33 -0600
Source: dosfstools
Binary: dosfstools dosfstools-dbg dosfstools-udeb
Architecture: source
Version: 3.0.27-1ubuntu0.1
Distribution: vivid-security
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@xxxxxxxxxxxxxxxx>
Changed-By: Emily Ratliff <emily.ratliff@xxxxxxxxxxxxx>
Description:
 dosfstools - utilities for making and checking MS-DOS FAT filesystems
 dosfstools-dbg - utilities for making and checking MS-DOS FAT filesystems (debug)
 dosfstools-udeb - utilities for making and checking MS-DOS FAT filesystems (udeb) (udeb)
Changes:
 dosfstools (3.0.27-1ubuntu0.1) vivid-security; urgency=medium
 .
   * SECURITY UPDATE: out of bounds read denial of service
     - debian/patches/date_oob_read.patch: prevent out of bounds array read
       in src/check.c.
     - No CVE number
   * SECURITY UPDATE: memory corruption via off-by-2 in FAT12
     - debian/patches/CVE-2015-8872.patch: fix FAT12 logic in src/fat.c.
     - CVE-2015-8872
   * SECURITY UPDATE: heap overflow via excessive FAT size specifications
     - debian/patches/CVE-2016-4804.patch: change size and perform checks in
       src/boot.c, src/fsck.fat.h.
     - CVE-2016-4804
Checksums-Sha1:
 4ad6b315d3403a0fe6704750d77372730225add3 2128 dosfstools_3.0.27-1ubuntu0.1.dsc
 c55232bbde4dfb4b2e33cc7d50abc607c8d51da5 11836 dosfstools_3.0.27-1ubuntu0.1.debian.tar.xz
Checksums-Sha256:
 fb28f7b7a58db6e616c417728591a57771ed22a33f6ee07fc71750e756e382cd 2128 dosfstools_3.0.27-1ubuntu0.1.dsc
 67b7f1737d4d38c55271270394924bf9d80badbfc24e9479c6b8eb482bd2f55a 11836 dosfstools_3.0.27-1ubuntu0.1.debian.tar.xz
Files:
 d4e7e266de135b4bdf3e723f09248b07 2128 otherosfs optional dosfstools_3.0.27-1ubuntu0.1.dsc
 9ddb33220d57b522bda20aea8a487e2a 11836 otherosfs optional dosfstools_3.0.27-1ubuntu0.1.debian.tar.xz
Original-Maintainer: Andreas Bombe <aeb@xxxxxxxxxx>