Your message dated Thu, 21 Feb 2008 23:47:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#260224: fixed in mailman 1:2.1.10~b3-1
has caused the Debian Bug report #260224,
regarding check_perms doesn't check archive permissions
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
260224: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=260224
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: mailman
Version: 2.1.4-5
Severity: normal
/var/lib/mailman/bin/check_perms doesn't check all the permissions
that it needs to. When converting a mailman installation over from
RedHat ES 3, the /var/lib/mailman/archives/private/FOO file are set
like so:
drwxrwsr-x 2 root list 4096 Jul 16 19:32 2004-May
-rw-r--r-- 1 root list 365794 Jul 16 19:32 2004-May.txt
-rw-r--r-- 1 root list 31470 Jul 16 19:32 2004-May.txt.gz
This bug was also hard to discover, because mailman seems to prefer
error.1 over error:
-rw-rw-r-- 1 list list 260 Jul 19 07:53 error
-rw-rw-r-- 1 www-data list 12380 Jul 19 08:09 error.1
for reporting tracebacks. I don't know if that's a related bug or
not, so I'm just leaving it in this report.
Tks,
Jeff Bailey
--- End Message ---
--- Begin Message ---
Source: mailman
Source-Version: 1:2.1.10~b3-1
We believe that the bug you reported is fixed in the latest version of
mailman, which is due to be installed in the Debian FTP archive:
mailman_2.1.10~b3-1.diff.gz
to pool/main/m/mailman/mailman_2.1.10~b3-1.diff.gz
mailman_2.1.10~b3-1.dsc
to pool/main/m/mailman/mailman_2.1.10~b3-1.dsc
mailman_2.1.10~b3-1_i386.deb
to pool/main/m/mailman/mailman_2.1.10~b3-1_i386.deb
mailman_2.1.10~b3.orig.tar.gz
to pool/main/m/mailman/mailman_2.1.10~b3.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thijs Kinkhorst <[EMAIL PROTECTED]> (supplier of updated mailman package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Fri, 22 Feb 2008 00:09:11 +0100
Source: mailman
Binary: mailman
Architecture: source i386
Version: 1:2.1.10~b3-1
Distribution: unstable
Urgency: low
Maintainer: Mailman for Debian <[EMAIL PROTECTED]>
Changed-By: Thijs Kinkhorst <[EMAIL PROTECTED]>
Description:
mailman - Powerful, web-based mailing list manager
Closes: 260224 446257 450399
Changes:
mailman (1:2.1.10~b3-1) unstable; urgency=low
.
* New upstream beta release.
+ Restricts XSS by list admins, CVE-2008-0564.
+ Obsoletes 56_fix_de_broken_links.patch.
+ Obsoletes 81_backport_export.dpatch.
+ Makes list handling case sensitivity consistent (closes: #446257).
+ Archives do not drop headerless mime parts (Closes: #450399).
+ check_perms checks more perms (Closes: #260224).
Files:
b124db23f70873bf34a63e504cbab239 1227 mail optional mailman_2.1.10~b3-1.dsc
853ac2f5e92ba3d19bbd770650cb7438 7826136 mail optional
mailman_2.1.10~b3.orig.tar.gz
b43bc402f64fff2833dc8fc65e7f2f28 137765 mail optional
mailman_2.1.10~b3-1.diff.gz
dd4328d701af27f5bcd20647a7d8b6dc 9205544 mail optional
mailman_2.1.10~b3-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iQEVAwUBR74LfWz0hbPcukPfAQI41wgAq7YRb17QJgDIZIqB+kRZBXUX+lq9HtsS
GWFiGcMUk30Q5hXKCQ647fAQ2SsayWyL1+DbAAz4AZynstWpx/BAubPFkMKBE9Qw
Ke8xfLI39U6UnqryFJRDYEV7ePn/tXFZ+jyjdNBUrO6LXpcyZZ+X90nlejkf4EKp
OCkqgg8gNfpFbEjCQ4I2T2r2HzD31Zbb9nvaHvsJwXNGpjFyv5/owJcwyJ5VeF2q
PHiqqCxbczUwb6VLeILLQu6KVD2phRihoRlEmiJqVJkEc3QiwdCrPv5pa7Ld4I6N
r9EOzmiwjlQ3ej+5jS8sx0dGqxJMF/usuex5As8iGDyZPpE4zAT5nw==
=6yQt
-----END PGP SIGNATURE-----
--- End Message ---
