Your message dated Tue, 02 Nov 2010 10:18:29 +0000
with message-id <[email protected]>
and subject line Bug#602013: Removed package(s) from unstable
has caused the Debian Bug report #597907,
regarding phpwiki has a version of nusoap.php that has an XSS vulnerability
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
597907: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=597907
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: phpwiki
Version: 1.3.14-3
Severity: normal
Hi,
phpwiki has in lib/nusoap/nusoap.php a very old version of nusoap that is
vulnerable to an XSS attack. See the bug #595248 that has been corrected
in Squeeze/Testing.
As the file isn't accessible directly, since there's a .htaccess with:
order allow,deny
Deny from all
in it, it's ok-ish, which pushes me to not sets this bug as an RC one,
but this is still a concern and should be addressed if possible.
-- System Information:
Debian Release: 5.0.5
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-4-xen-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
--- End Message ---
--- Begin Message ---
Version: 1.3.14-5+rm
Dear submitter,
as the package phpwiki has just been removed from the Debian archive
unstable we hereby close the assiciated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see http://bugs.debian.org/602013
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].
Debian distribution maintenance software
pp.
Alexander Reichle-Schmehl (the ftpmaster behind the curtain)
--- End Message ---
