Your message dated Mon, 01 Feb 2010 01:56:23 +0000
with message-id <[email protected]>
and subject line Bug#567635: fixed in libapache2-mod-perl2 2.0.4-5+lenny1
has caused the Debian Bug report #567635,
regarding XSS in Status.pm
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
567635: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567635
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libapache2-mod-perl2
Severity: grave
Tags: security
Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0796
which contains links to the upstream commits.
This doesn't warrant a DSA, but it would be nice if you could fix this
in a stable point update for Lenny.
Cheers,
Moritz
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-trunk-686 (SMP w/1 CPU core)
Locale: LANG=C, lc_ctype=de_de.iso-8859...@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash
Versions of packages libapache2-mod-perl2 depends on:
pn apache2.2-common <none> (no description available)
ii libapr1 1.3.8-1 The Apache Portable Runtime Librar
ii libaprutil1 1.3.9+dfsg-3 The Apache Portable Runtime Utilit
ii libc6 2.10.2-5 Embedded GNU C Library: Shared lib
ii libdevel-symdump-perl 2.08-2 Perl module for inspecting perl's
ii libperl5.10 5.10.1-9 shared Perl library
ii liburi-perl 1.52-1 module to manipulate and access UR
ii libuuid1 2.16.2-0 Universally Unique ID library
ii libwww-perl 5.834-1 Perl HTTP/WWW client/server librar
ii netbase 4.40 Basic TCP/IP networking system
ii perl [libmime-base64-perl] 5.10.1-9 Larry Wall's Practical Extraction
ii perl-base [perlapi-5.10.0] 5.10.1-9 minimal Perl system
Versions of packages libapache2-mod-perl2 recommends:
pn libapache2-reload-perl <none> (no description available)
pn libbsd-resource-perl <none> (no description available)
libapache2-mod-perl2 suggests no packages.
--- End Message ---
--- Begin Message ---
Source: libapache2-mod-perl2
Source-Version: 2.0.4-5+lenny1
We believe that the bug you reported is fixed in the latest version of
libapache2-mod-perl2, which is due to be installed in the Debian FTP archive:
libapache2-mod-perl2-dev_2.0.4-5+lenny1_all.deb
to
main/liba/libapache2-mod-perl2/libapache2-mod-perl2-dev_2.0.4-5+lenny1_all.deb
libapache2-mod-perl2-doc_2.0.4-5+lenny1_all.deb
to
main/liba/libapache2-mod-perl2/libapache2-mod-perl2-doc_2.0.4-5+lenny1_all.deb
libapache2-mod-perl2_2.0.4-5+lenny1.diff.gz
to main/liba/libapache2-mod-perl2/libapache2-mod-perl2_2.0.4-5+lenny1.diff.gz
libapache2-mod-perl2_2.0.4-5+lenny1.dsc
to main/liba/libapache2-mod-perl2/libapache2-mod-perl2_2.0.4-5+lenny1.dsc
libapache2-mod-perl2_2.0.4-5+lenny1_amd64.deb
to
main/liba/libapache2-mod-perl2/libapache2-mod-perl2_2.0.4-5+lenny1_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Damyan Ivanov <[email protected]> (supplier of updated libapache2-mod-perl2
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 31 Jan 2010 08:40:19 +0200
Source: libapache2-mod-perl2
Binary: libapache2-mod-perl2 libapache2-mod-perl2-dev libapache2-mod-perl2-doc
Architecture: source all amd64
Version: 2.0.4-5+lenny1
Distribution: stable
Urgency: high
Maintainer: Debian Perl Group <[email protected]>
Changed-By: Damyan Ivanov <[email protected]>
Description:
libapache2-mod-perl2 - Integration of perl with the Apache2 web server
libapache2-mod-perl2-dev - Integration of perl with the Apache2 web server -
development fil
libapache2-mod-perl2-doc - Integration of perl with the Apache2 web server -
documentation
Closes: 567635
Changes:
libapache2-mod-perl2 (2.0.4-5+lenny1) stable; urgency=high
.
* add 100-svn-XSS-Status.patch; fixes XSS in Apache2::Status (CVE-2009-0796)
Patch taken from r760926 of upstream SVN.
Closes: #567635
Checksums-Sha1:
00ef0369e5ffb015a2e547b9128451bffe62f744 1873
libapache2-mod-perl2_2.0.4-5+lenny1.dsc
706099dea7619e59e1bf5458dc4097fffa5b3e3e 12003
libapache2-mod-perl2_2.0.4-5+lenny1.diff.gz
969e08044a481d2ebcc126a3bab5e0bdc2e45d88 79420
libapache2-mod-perl2-dev_2.0.4-5+lenny1_all.deb
3789f0cd6e653073aba3e4e2f00a68bcb9d7d90a 3130474
libapache2-mod-perl2-doc_2.0.4-5+lenny1_all.deb
a6c9fe25879ec0be0fecc6b2a9d936330d98dce2 1149082
libapache2-mod-perl2_2.0.4-5+lenny1_amd64.deb
Checksums-Sha256:
f12c136fdc50a17f4c12ce76527997835b334edc1f3834c622db6396d1df8b17 1873
libapache2-mod-perl2_2.0.4-5+lenny1.dsc
eac2624376842f7e3930420f5d8e38403cce10c22993ccd023daf73b00ad014b 12003
libapache2-mod-perl2_2.0.4-5+lenny1.diff.gz
56f5e311a73c9e4d2201b6aaaf67db01de5198262c873331a2356fc31e00cdcf 79420
libapache2-mod-perl2-dev_2.0.4-5+lenny1_all.deb
7cb9f6248449ff9dd02521806b9fba8c472fda24bd61fa9c7096c8f4dc13460e 3130474
libapache2-mod-perl2-doc_2.0.4-5+lenny1_all.deb
bdee826fc4667666a734338dbe79a671981ac48ac5394312fb2601cc50f92672 1149082
libapache2-mod-perl2_2.0.4-5+lenny1_amd64.deb
Files:
7178e522b7325b19c47dba5fd71e6acd 1873 perl optional
libapache2-mod-perl2_2.0.4-5+lenny1.dsc
88743f2a8fd4e1413cb32125f684226d 12003 perl optional
libapache2-mod-perl2_2.0.4-5+lenny1.diff.gz
cf45303826845a0327d38b6d267cae74 79420 libdevel optional
libapache2-mod-perl2-dev_2.0.4-5+lenny1_all.deb
95a95f21a5b6c0af1cb0c1ca50f40263 3130474 doc optional
libapache2-mod-perl2-doc_2.0.4-5+lenny1_all.deb
8fed6b68945838efd6355cbc5a4ed607 1149082 perl optional
libapache2-mod-perl2_2.0.4-5+lenny1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAktl1R8ACgkQHqjlqpcl9jvAiACdHs9EjGcNi6Uyl7fiYJrdwn3G
d4gAoLipT3/4J34rRRcjuTkX8IH/jIRF
=605N
-----END PGP SIGNATURE-----
--- End Message ---
