Your message dated Wed, 26 Dec 2007 11:17:02 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#416058: fixed in kvpnc 0.9.0-1 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message ---Package: kvpnc Version: 0.8.6.1-1 Severity: normal Tags: security --- Please enter the report below this line. --- When using kvpnc with pptp you have the option *not* to store the password and username. But even when you chose this option, kvpnc stores the username in /etc/ppp/peers/kvpnc.foo and the password in /etc/ppp/chap-secrets Although the chap-secrets is just readable by root/root, the passwords are stored in cleartext in this file so pretending to not storing the passwords but storing them behind the back of the user is a security concern. If you want to reporduce this bug, please keep in mind that the passwords are stored in chap-secrets after you tried to connect. So you must connect before the passwords are stored. I leave it to you to adjust the severity of this bug. Cheers, Bastian --- System information. --- Architecture: i386 Kernel: Linux 2.6.18-4-686 Debian Release: 4.0 500 unstable www.debian-multimedia.org 500 unstable ftp.de.debian.org 1 experimental ftp.de.debian.org --- Package information. --- Depends (Version) | Installed =====================================-+-================ kdelibs4c2a (>= 4:3.5.4-1) | 4:3.5.5a.dfsg.1-6 libc6 (>= 2.3.6-6) | 2.3.6.ds1-13 libgcc1 (>= 1:4.1.1-12) | 1:4.1.1-21 libgcrypt11 (>= 1.2.2) | 1.2.3-2 libice6 (>= 1:1.0.0) | 1:1.0.1-2 libpng12-0 (>= 1.2.8rel) | 1.2.15~beta5-1 libqt3-mt (>= 3:3.3.6) | 3:3.3.7-3 libsm6 | 1:1.0.1-3 libstdc++6 (>= 4.1.1-12) | 4.1.1-21 libx11-6 | 2:1.0.3-6 libxext6 | 1:1.0.1-2 zlib1g (>= 1:1.2.1) | 1:1.2.3-13 menu | 2.1.33 net-tools | 1.60-17 psmisc | 22.3-1 kdebase-bin | 4:3.5.5a.dfsg.1-6 OR gksu | OR sux | module-init-tools | 3.3-pre4-2 OR modutils | -- Bastian Venthur http://venthur.de Debian Developer venthur at debian org
--- End Message ---
--- Begin Message ---Source: kvpnc Source-Version: 0.9.0-1 We believe that the bug you reported is fixed in the latest version of kvpnc, which is due to be installed in the Debian FTP archive: kvpnc_0.9.0-1.diff.gz to pool/main/k/kvpnc/kvpnc_0.9.0-1.diff.gz kvpnc_0.9.0-1.dsc to pool/main/k/kvpnc/kvpnc_0.9.0-1.dsc kvpnc_0.9.0-1_amd64.deb to pool/main/k/kvpnc/kvpnc_0.9.0-1_amd64.deb kvpnc_0.9.0.orig.tar.gz to pool/main/k/kvpnc/kvpnc_0.9.0.orig.tar.gz A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Fathi Boudra <[EMAIL PROTECTED]> (supplier of updated kvpnc package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 26 Dec 2007 09:02:33 +0100 Source: kvpnc Binary: kvpnc Architecture: source amd64 Version: 0.9.0-1 Distribution: unstable Urgency: low Maintainer: Fathi Boudra <[EMAIL PROTECTED]> Changed-By: Fathi Boudra <[EMAIL PROTECTED]> Description: kvpnc - vpn clients frontend for KDE Closes: 416058 430015 439010 442623 447805 455664 Changes: kvpnc (0.9.0-1) unstable; urgency=low . * New upstream release. (Closes: #416058, #430015) * Update my e-mail address. * Switch to quilt patch system. * Bump Standards-Version to 3.7.3. * Use Homepage field. * Refresh patches. * Update menu file to latest menu policy. * Replace l2tpd by xl2tpd as Suggests. (Closes: #439010) * Add patch to fix FTBFS with gcc-4.3: duplicate function parameters. (Closes: #455664) * Add patch to check super user privilege. (Closes: #447805) * Cleanup *.gmo files. (Closes: #442623) * Build with --as-needed linker flag. Files: acb0728476fa337d22cc3eb42e398e4e 865 kde optional kvpnc_0.9.0-1.dsc 338724d0552c594b8b4e7a4357a76acd 3389388 kde optional kvpnc_0.9.0.orig.tar.gz 034f090463b11e5a2aaaed0fa252b633 26721 kde optional kvpnc_0.9.0-1.diff.gz d891956ba5469ee1869535ea3d7e83aa 2142918 kde optional kvpnc_0.9.0-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iQCVAwUBR3IuSIz1NfZqpXL3AQJvAwP+Oyc6SjTmFf9YM+MHJmC6VTFc3e1WD1bk BA/gprg1SwarC7+pNeczzS7tiwXq7OlUaF6aUuK+lHE6nKX0eO3C3bRhsfG305ld OSLwLrzw0Ugjyg74zlKoiNVecyKjrQcf7rc1Lp8SJr2MIzR1c3vgsrOOwN4jCCH0 kEJzHyyhr/A= =3W11 -----END PGP SIGNATURE-----
--- End Message ---
