Your message dated Sat, 09 Jun 2012 23:32:47 +0000
with message-id <[email protected]>
and subject line Bug#655971: fixed in mpack 1.6-8
has caused the Debian Bug report #655971,
regarding CVE-2011-4919 info disclosure
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
655971: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655971
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mpack
Severity: important
Tags: security
Hi,
as it seems mpack has an open vulnaribility which has been assigned a
CVE already. See http://openwall.com/lists/oss-security/2011/12/31/1 for
more information.
The security tracker is updated as I understand it, thanks to pabs.
Hauke
--- End Message ---
--- Begin Message ---
Source: mpack
Source-Version: 1.6-8
We believe that the bug you reported is fixed in the latest version of
mpack, which is due to be installed in the Debian FTP archive:
mpack_1.6-8.debian.tar.bz2
to main/m/mpack/mpack_1.6-8.debian.tar.bz2
mpack_1.6-8.dsc
to main/m/mpack/mpack_1.6-8.dsc
mpack_1.6-8_mipsel.deb
to main/m/mpack/mpack_1.6-8_mipsel.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anibal Monsalve Salazar <[email protected]> (supplier of updated mpack package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 10 Jun 2012 09:02:03 +1000
Source: mpack
Binary: mpack
Architecture: source mipsel
Version: 1.6-8
Distribution: unstable
Urgency: low
Maintainer: Anibal Monsalve Salazar <[email protected]>
Changed-By: Anibal Monsalve Salazar <[email protected]>
Description:
mpack - tools for encoding/decoding MIME messages
Closes: 655971
Changes:
mpack (1.6-8) unstable; urgency=low
.
* CVE-2011-4919 - Fix permissions
Patch by Sebastian Pipping
Add patch 02-655971-fix-permissions.patch
Closes: #655971
* Standards version is 3.9.3
* Use hardening options
Checksums-Sha1:
adbf8326747d22d1cbe25368cd35695907ff9963 1685 mpack_1.6-8.dsc
5eacf342b68f0c4508b78df1722397f7f80bf24a 9670 mpack_1.6-8.debian.tar.bz2
792c0fec4033b5ac1a378dc5e60fb5870315cc04 41310 mpack_1.6-8_mipsel.deb
Checksums-Sha256:
d465095784695d0b89125d799382bb76706ee03428fbfa9f1ce2cf2f7616e938 1685
mpack_1.6-8.dsc
6b167e1375b2cec29238df863fb5ff2a90850b8471b5e3e61464741b8bc3b3e1 9670
mpack_1.6-8.debian.tar.bz2
e15bbf0e8c66f281d3b38458b2f227fbdfc8b4023396f5804d616edf64987fbb 41310
mpack_1.6-8_mipsel.deb
Files:
6e2d3e2f2167aa0b9b512079380adbfa 1685 mail optional mpack_1.6-8.dsc
42bd7ecce008fc5d3db50975a88d75c8 9670 mail optional mpack_1.6-8.debian.tar.bz2
4cb362c08cb06c609d05a533dced5513 41310 mail optional mpack_1.6-8_mipsel.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQIcBAEBCAAGBQJP09j0AAoJEHxWrP6UeJfYDzgP/iQjgz3B88CM5P7QboTxT4HR
8FBU6IygZxBzoNxygr6Xnllg7NT5HcKTZ4Yrq1JVx4tkVl2pcmF9u9SwpIYKhvzG
li2T2NfEVnG6YBmBJd+4ZYLa7rhkilX+D9dA5N+yEx6qOYbUsvrFj1bA6t5eK3Gp
LHvf0KgsSBZE0IoGn5iqZC79iRxmWhlURLzJ7+cJmWOgLmJYcC6d1vex0oaxaV8Y
ERDrSjdCgSDbYwo31rYcWwaGXDdNxhJsm27OBsk3xmnxWsmwVP5sTv8FLs1bM5eS
DpBQV0yonemRnfWsKC11mOUZy3B5w0jzGRi6VeTlRhJ2wJhkz88Lp2OijW81vGWc
70z62yFUzib5B/03hyGIl0vJRt7BitQ6wty8PZyixrFDjTWs9igqi5oNqXvlrUEQ
/aDfn7fueIPuyHlausgYWPqyDNiOjMKfuIE5UltGcPv1oPlbzsf/n5fP84iHRDM/
wd21cUMuqDpusj5jOyDyCT2NNx7nIRfUDcltIiBwPajDNsNgl4Ea96GUtfD4azyN
7hllbCPzGAU9F3LoWXyofqhWu/bVlmD2J1ily2DXofYVDV/EQ6Z8bd3xByoRKaRs
8xND+kW29JdWus+ua9ZTL0Q2h9/N4HHBeOP1LuvZuCIYdDGAJ7yoe2lM2l/MLE8B
p+l2Un3AULOIeGpTDHl/
=QbDV
-----END PGP SIGNATURE-----
--- End Message ---
