Your message dated Thu, 17 Jan 2008 07:52:32 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#458315: fixed in dovecot 1.0.rc15-2etch3
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: dovecot
Version: 1.0.rc15-2etch1
Tags: security
Severity: important


Hi,

A security issue has been discovered in Dovecot:
http://dovecot.org/list/dovecot-news/2007-December/000057.html

Users can be presented with wrong mailboxes if they have the same password as 
another issue. Since it requires quite a specific configuration (see URL), 
I've labeled this "important".

Unstable is already fixed, sarge is reportedly not affected. Could you see 
whether this issue is severe enough for a DSA, and if so, prepare a package 
for it?

thanks,
Thijs

Attachment: pgpQ7zC1xLG9q.pgp
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: dovecot
Source-Version: 1.0.rc15-2etch3

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive:

dovecot-common_1.0.rc15-2etch3_amd64.deb
  to pool/main/d/dovecot/dovecot-common_1.0.rc15-2etch3_amd64.deb
dovecot-imapd_1.0.rc15-2etch3_amd64.deb
  to pool/main/d/dovecot/dovecot-imapd_1.0.rc15-2etch3_amd64.deb
dovecot-pop3d_1.0.rc15-2etch3_amd64.deb
  to pool/main/d/dovecot/dovecot-pop3d_1.0.rc15-2etch3_amd64.deb
dovecot_1.0.rc15-2etch3.diff.gz
  to pool/main/d/dovecot/dovecot_1.0.rc15-2etch3.diff.gz
dovecot_1.0.rc15-2etch3.dsc
  to pool/main/d/dovecot/dovecot_1.0.rc15-2etch3.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Fabio Tranchitella <[EMAIL PROTECTED]> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Mon, 07 Jan 2008 10:29:20 +0100
Source: dovecot
Binary: dovecot-common dovecot-pop3d dovecot-imapd
Architecture: source amd64
Version: 1.0.rc15-2etch3
Distribution: stable-security
Urgency: low
Maintainer: Dovecot Maintainers <[EMAIL PROTECTED]>
Changed-By: Fabio Tranchitella <[EMAIL PROTECTED]>
Description: 
 dovecot-common - secure mail server that supports mbox and maildir mailboxes
 dovecot-imapd - secure IMAP server that supports mbox and maildir mailboxes
 dovecot-pop3d - secure POP3 server that supports mbox and maildir mailboxes
Closes: 458315
Changes: 
 dovecot (1.0.rc15-2etch3) stable-security; urgency=low
 .
   * Rebuilt, incrementing the version number.
   * Specific LDAP + auth cache configuration may mix up user logins:
     http://dovecot.org/list/dovecot-news/2007-December/000057.html;
     Upstream patch: http://hg.dovecot.org/dovecot-1.0/raw-rev/2cedab21cd6d
     (Closes: #458315)
Files: 
 5191ee3012a0cc39733193c0a252390b 1007 mail optional dovecot_1.0.rc15-2etch3.dsc
 0830883bb3ca7c2630997d965de70649 95500 mail optional 
dovecot_1.0.rc15-2etch3.diff.gz
 e62e69df8289b9faf7dc784aa36653fb 1217440 mail optional 
dovecot-common_1.0.rc15-2etch3_amd64.deb
 ef8531b8cf9e8bf4ef56e9d3ca856c30 568666 mail optional 
dovecot-imapd_1.0.rc15-2etch3_amd64.deb
 9c7af4af63a1e8fe9eefec8a47f12823 534094 mail optional 
dovecot-pop3d_1.0.rc15-2etch3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHgfTeK/juK3+WFWQRAv8wAKCCJzEw9Ihouf/WxDciaFmoPNJ9SgCcDoB4
Ft+F8nb56dXLPzR1hkhM1Rk=
=CDqH
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to