Your message dated Thu, 28 Apr 2005 01:17:09 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#300815: fixed in evolution 2.0.4-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 22 Mar 2005 01:00:52 +0000
>From [EMAIL PROTECTED] Mon Mar 21 17:00:52 2005
Return-path: <[EMAIL PROTECTED]>
Received: from urchin.earth.li [193.201.200.73]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DDXlM-0004ls-00; Mon, 21 Mar 2005 17:00:52 -0800
Received: from [2001:1b40:2:f100::f101:2] (helo=server)
by urchin.earth.li with esmtp (Exim 3.35 #1 (Debian))
id 1DDXlL-0000o0-00
for <[EMAIL PROTECTED]>; Tue, 22 Mar 2005 01:00:51 +0000
Received: from [2001:1b40:2:f101:202:b3ff:fe4c:3b3] (helo=callisto)
by server with esmtp (Exim 3.35 #1 (Debian))
id 1DDXlK-000617-00
for <[EMAIL PROTECTED]>; Tue, 22 Mar 2005 01:00:50 +0000
Received: from dom by callisto with local (Exim 4.44)
id 1DDXlH-0003Lo-5G
for [EMAIL PROTECTED]; Tue, 22 Mar 2005 01:00:47 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Dominic Hargreaves <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: CAN-2005-0806: Remote denial of service in evolution 2.0.3
X-Mailer: reportbug 3.8
Date: Tue, 22 Mar 2005 01:00:47 +0000
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: evolution
Version: 2.0.3-1.2
Severity: normal
Tags: security,patch
Evolution 2.0.3 allows remote attackers to cause a denial of service
(application crash) via crafted messages, possibly involving charsets in
attachment filenames.
CVE Reference: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0806
Upstream bug and patch: http://bugzilla.ximian.com/show_bug.cgi?id=72609
---------------------------------------
Received: (at 300815-close) by bugs.debian.org; 28 Apr 2005 05:22:43 +0000
>From [EMAIL PROTECTED] Wed Apr 27 22:22:43 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DR1U3-0004jV-00; Wed, 27 Apr 2005 22:22:43 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DR1Of-000673-00; Thu, 28 Apr 2005 01:17:09 -0400
From: Takuo KITAME <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#300815: fixed in evolution 2.0.4-2
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Thu, 28 Apr 2005 01:17:09 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 2
Source: evolution
Source-Version: 2.0.4-2
We believe that the bug you reported is fixed in the latest version of
evolution, which is due to be installed in the Debian FTP archive:
evolution-dev_2.0.4-2_i386.deb
to pool/main/e/evolution/evolution-dev_2.0.4-2_i386.deb
evolution_2.0.4-2.diff.gz
to pool/main/e/evolution/evolution_2.0.4-2.diff.gz
evolution_2.0.4-2.dsc
to pool/main/e/evolution/evolution_2.0.4-2.dsc
evolution_2.0.4-2_i386.deb
to pool/main/e/evolution/evolution_2.0.4-2_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Takuo KITAME <[EMAIL PROTECTED]> (supplier of updated evolution package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 28 Apr 2005 12:35:33 +0900
Source: evolution
Binary: evolution-dev evolution
Architecture: source i386
Version: 2.0.4-2
Distribution: testing-proposed-updates
Urgency: high
Maintainer: Takuo KITAME <[EMAIL PROTECTED]>
Changed-By: Takuo KITAME <[EMAIL PROTECTED]>
Description:
evolution - The groupware suite
evolution-dev - Development library files for Evolution
Closes: 280303 300815
Changes:
evolution (2.0.4-2) testing-proposed-updates; urgency=high
.
* remove broken patch: decode-rfc2047-invalid-encoded-word.patch
(closes: #280303)
* applied security fix patch.
- CAN-2005-0806: Remote denial of service in evolution 2.0.3
(closes: #300815)
Files:
beb989712dbb1c81a4a19c6bd0bd3efd 1155 gnome optional evolution_2.0.4-2.dsc
03d298462d11f381f9e725fa61b61dd9 291751 gnome optional
evolution_2.0.4-2.diff.gz
b4ae1664b08e0a1a00a174cfc0925df1 10228786 gnome optional
evolution_2.0.4-2_i386.deb
711ba6c545aa2e28f6ba29785d2c5edb 159952 devel optional
evolution-dev_2.0.4-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCcG9XU+WZW1FVMwoRAv92AJ9HobeDArcj7L4x2uvmbh8/zp0z/gCaA/H2
3ESwyCmziMyrQFcQ+OXjj0M=
=baHr
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
