Your message dated Thu, 05 Aug 2010 19:17:18 +0000
with message-id <[email protected]>
and subject line Bug#548887: fixed in pgbouncer 1.3.3-2
has caused the Debian Bug report #548887,
regarding insecure permissions on configuration files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
548887: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548887
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: pgbouncer
Version: 1.3.1-1
Severity: important

Since /etc/pgbouncer/pgbouncer.ini and userlist.txt often contain passwords, 
it's probably not a good idea to install them with group and other read 
permissions.  An administrator could of course revoke the permissions before 
putting passwords in there, but I think it should be secure(r) by default.



--- End Message ---
--- Begin Message ---
Source: pgbouncer
Source-Version: 1.3.3-2

We believe that the bug you reported is fixed in the latest version of
pgbouncer, which is due to be installed in the Debian FTP archive:

pgbouncer_1.3.3-2.diff.gz
  to main/p/pgbouncer/pgbouncer_1.3.3-2.diff.gz
pgbouncer_1.3.3-2.dsc
  to main/p/pgbouncer/pgbouncer_1.3.3-2.dsc
pgbouncer_1.3.3-2_i386.deb
  to main/p/pgbouncer/pgbouncer_1.3.3-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Peter Eisentraut <[email protected]> (supplier of updated pgbouncer package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Thu, 05 Aug 2010 21:57:00 +0300
Source: pgbouncer
Binary: pgbouncer
Architecture: source i386
Version: 1.3.3-2
Distribution: unstable
Urgency: low
Maintainer: Fernando Ike de Oliveira <[email protected]>
Changed-By: Peter Eisentraut <[email protected]>
Description: 
 pgbouncer  - lightweight connection pooler for PostgreSQL
Closes: 548887
Changes: 
 pgbouncer (1.3.3-2) unstable; urgency=low
 .
   * Added myself to uploaders
   * Fixed debian/copyright to match reality
   * Updated standards version
   * Install configuration files with more secure permissions (closes: #548887)
Checksums-Sha1: 
 4ec76111d7d8cc4b6dd24a9c2eb8ef730f451a34 1290 pgbouncer_1.3.3-2.dsc
 918c5e7bd59415f819baf6921093bacc1e15f583 6534 pgbouncer_1.3.3-2.diff.gz
 9a107524448a1f65239ffe3bbbceabfcb96fa670 81764 pgbouncer_1.3.3-2_i386.deb
Checksums-Sha256: 
 c984b6eca3150945c90fdf64c715c2de3ae3dc84bd2d23a61aaf030b8dae3576 1290 
pgbouncer_1.3.3-2.dsc
 8e5cd0fe20fe94025e25c4a1eb3d5108c38ef07ea14b27741d0910c51ce6b245 6534 
pgbouncer_1.3.3-2.diff.gz
 eb494b643f0c55afdad2cf416ab255a5976c19e63df0630c45e716dbfb5364e6 81764 
pgbouncer_1.3.3-2_i386.deb
Files: 
 3e958f957a3767e19b076d01497a8730 1290 database optional pgbouncer_1.3.3-2.dsc
 d78db49beefe5819d4d02e060c05be42 6534 database optional 
pgbouncer_1.3.3-2.diff.gz
 f5b0b29cbc60d4af36307dc8938fa700 81764 database optional 
pgbouncer_1.3.3-2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkxbCfMACgkQTTx8oVVPtMZIkACeKTfHxNxAg5pHAQWu1XrIVxm7
DNoAnArlMLsiXVkQ+swKFZL4E6Hc5Z2e
=i0tG
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to