Your message dated Thu, 22 Mar 2007 17:17:03 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#415379: fixed in ldap-account-manager 1.1.1-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: ldap-account-manager
Version: 1.1.1-1
Severity: important
TREE VIEW
In tree view, if I change the description to
123"456'789
I see:
Do you want to make these changes?
Attribute Old value New value
description les 123\"456\'789
which is different, and then when I push commit, the value comes out as:
123\\\"456\\\'789
USERS VIEW
The HTML generated for the form is:
<td>
<input name="description" size="30" maxlength="255" value="123\\\" 456=""
789="" tabindex="5002" type="text"></td>
Which again is very broken.
(possibly something like this might be a security issue, but I haven't
really considered this in detail yet - presumably the data from LDAP
should be trusted so it should be OK...)
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing'), (200, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-xen-686
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
--- End Message ---
--- Begin Message ---
Source: ldap-account-manager
Source-Version: 1.1.1-2
We believe that the bug you reported is fixed in the latest version of
ldap-account-manager, which is due to be installed in the Debian FTP archive:
ldap-account-manager_1.1.1-2.diff.gz
to pool/main/l/ldap-account-manager/ldap-account-manager_1.1.1-2.diff.gz
ldap-account-manager_1.1.1-2.dsc
to pool/main/l/ldap-account-manager/ldap-account-manager_1.1.1-2.dsc
ldap-account-manager_1.1.1-2_all.deb
to pool/main/l/ldap-account-manager/ldap-account-manager_1.1.1-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Roland Gruber <[EMAIL PROTECTED]> (supplier of updated ldap-account-manager
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 21 Mar 2007 14:11:42 +0100
Source: ldap-account-manager
Binary: ldap-account-manager
Architecture: source all
Version: 1.1.1-2
Distribution: testing-proposed-updates
Urgency: high
Maintainer: Roland Gruber <[EMAIL PROTECTED]>
Changed-By: Roland Gruber <[EMAIL PROTECTED]>
Description:
ldap-account-manager - webfrontend for managing accounts in an LDAP directory
Closes: 415379
Changes:
ldap-account-manager (1.1.1-2) testing-proposed-updates; urgency=high
.
* security fix
* quoting of user description field broken (Closes: #415379)
Files:
5b0c17cd0898aa3eeddebadab3ff83c2 631 web extra ldap-account-manager_1.1.1-2.dsc
31456679488e8877fb20568c8c18ef63 16610 web extra
ldap-account-manager_1.1.1-2.diff.gz
ef8ebe48e1b291631b63b7ba103a9025 1638520 web extra
ldap-account-manager_1.1.1-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGArcAK/juK3+WFWQRArukAJ9wkyA4rEGq3y3HV6w+O3eWqTg75ACbBKhg
ieE0IezNNC0hYz4QOn/1Nt4=
=PrhD
-----END PGP SIGNATURE-----
--- End Message ---
