Your message dated Tue, 24 Jan 2012 09:03:37 +0000
with message-id <[email protected]>
and subject line Bug#657070: fixed in siproxd 1:0.8.1-2
has caused the Debian Bug report #657070,
regarding embedded library ltdl
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
657070: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657070
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: siproxd
Version: 1:0.8.1-1
Severity: important
Tags: security upstream help
siproxd currently ships an embedded copy of the ltdl library.
The original version of ltdl shipped was vunerable to
'CVE-2009-3736 local privlege esclation'
siproxd upstream (Thomas) have now upgraded the embedded copy of ltdl
as a result siproxd is no longer vunerable to CVE-2009-3736.
The current version of siproxd in Debian Fixed in version siproxd/1:0.8.1-1.
However this Debian version is still using the embedded ltdl library, rather
than the preferred system provided ltdl library.
Whilst siproxd does detect if a system ltdl library is available it does
fail to build from source (FTBFS) with the error:
plugins.c:65: undefined reference to 'lt__PROGRAM__LTX_preloaded_symbols'
which has also been reported here:
http://blog.gmane.org/gmane.network.siproxd/month=20110201
Assistance to fix this issue in the Debian package would be appreciated.
Mark
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages siproxd depends on:
ii adduser 3.113
ii libc6 2.13-24
ii libosip2-7 3.6.0-2
siproxd recommends no packages.
Versions of packages siproxd suggests:
ii linphone 3.5.0-2
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: siproxd
Source-Version: 1:0.8.1-2
We believe that the bug you reported is fixed in the latest version of
siproxd, which is due to be installed in the Debian FTP archive:
siproxd_0.8.1-2.debian.tar.gz
to main/s/siproxd/siproxd_0.8.1-2.debian.tar.gz
siproxd_0.8.1-2.dsc
to main/s/siproxd/siproxd_0.8.1-2.dsc
siproxd_0.8.1-2_amd64.deb
to main/s/siproxd/siproxd_0.8.1-2_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mark Purcell <[email protected]> (supplier of updated siproxd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 24 Jan 2012 19:43:05 +1100
Source: siproxd
Binary: siproxd
Architecture: source amd64
Version: 1:0.8.1-2
Distribution: unstable
Urgency: low
Maintainer: Debian VoIP Team <[email protected]>
Changed-By: Mark Purcell <[email protected]>
Description:
siproxd - SIP proxy/redirect/registrar
Closes: 633224 657070
Changes:
siproxd (1:0.8.1-2) unstable; urgency=low
.
* Add siproxd-libtool-2.4.patch - Thanks to Chí-Thanh Christopher
Nguyễn for the gentoo workaround (Closes: #657070)
- Fixes "embedded library ltdl"
* Switch to dh 7
* source/format 3.0 (quilt)
* Remove .la files non-empty-dependency_libs-in-la-file (Closes: #633224)
- Fixes "Getting rid of unneeded *.la / emptying dependency_libs"
* Update debian/copyright GPL-2 - copyright-refers-to-symlink-license
* Drop obsolete NEWS - debian-news-entry-uses-asterisk
* Drop obsolete Suggests:
Checksums-Sha1:
c29886bfdaef3e10e622ac62e842c9d3ab4c638d 1461 siproxd_0.8.1-2.dsc
60a93f59626e7cbad8294e081c67df0bb9fb794d 8976 siproxd_0.8.1-2.debian.tar.gz
b532488697288cd4297b0800bd66a1849cf54b8f 363318 siproxd_0.8.1-2_amd64.deb
Checksums-Sha256:
58285cdcad5ef802f6ab7b0716164a9b95c405f7e1ce228173cac207c38e8f2b 1461
siproxd_0.8.1-2.dsc
75673318d6bd6c896bc8bf40df17dc22230506ab7522d844baf5a84767ef28c0 8976
siproxd_0.8.1-2.debian.tar.gz
7ece3bcd1cf364d44c06fb08b2e59596c190c12ddcba3416e31f7eea97cf0cc8 363318
siproxd_0.8.1-2_amd64.deb
Files:
8441366205cd45859202801b98b0ff50 1461 net optional siproxd_0.8.1-2.dsc
7410a73e8fa02a9c741e7079520628eb 8976 net optional
siproxd_0.8.1-2.debian.tar.gz
276a7b69979b0157c3ca39ccf250d56f 363318 net optional siproxd_0.8.1-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk8eb4oACgkQoCzanz0IthIOzQCfQaU36hbjyHjxMe69ij1tAg4Y
pDoAn3kYt83B3ilT3zlPtjvp87+nmv9g
=dmQC
-----END PGP SIGNATURE-----
--- End Message ---
