Your message dated Fri, 13 Jul 2012 03:02:13 +0000
with message-id <[email protected]>
and subject line Bug#681408: fixed in libpng 1.2.49-2
has caused the Debian Bug report #681408,
regarding Change "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
681408: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681408
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libpng
Version: 1.2.49-1
Severity: important
Tags: security
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3386
http://security-tracker.debian.org/tracker/CVE-2012-3386
Change "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386
diff -urNp libpng-1.2.49/Makefile.in libpng-1.2.50/Makefile.in
--- a/Makefile.in 2012-03-29 15:47:09.000000000 +1100
+++ b/Makefile.in 2012-07-10 10:37:13.000000000 +1000
@@ -1146,7 +1146,7 @@ distcheck: dist
*.zip*) \
unzip $(distdir).zip ;;\
esac
- chmod -R a-w $(distdir); chmod a+w $(distdir)
+ chmod -R a-w $(distdir); chmod u+w $(distdir)
mkdir $(distdir)/_build
mkdir $(distdir)/_inst
chmod a-w $(distdir)
--- End Message ---
--- Begin Message ---
Source: libpng
Source-Version: 1.2.49-2
We believe that the bug you reported is fixed in the latest version of
libpng, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anibal Monsalve Salazar <[email protected]> (supplier of updated libpng package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 13 Jul 2012 12:31:39 +1000
Source: libpng
Binary: libpng12-0 libpng12-dev libpng3 libpng12-0-udeb
Architecture: source i386
Version: 1.2.49-2
Distribution: unstable
Urgency: high
Maintainer: Anibal Monsalve Salazar <[email protected]>
Changed-By: Anibal Monsalve Salazar <[email protected]>
Description:
libpng12-0 - PNG library - runtime
libpng12-0-udeb - PNG library - minimal runtime library (udeb)
libpng12-dev - PNG library - development
libpng3 - PNG library - runtime
Closes: 681408
Changes:
libpng (1.2.49-2) unstable; urgency=high
.
* Change "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386
Add 02-681408-CVE-2012-3386-Makefile.in.patch
Closes: #681408
Checksums-Sha1:
229685b62f1a02c9bf2b5acf1e48f798bcc3b104 1976 libpng_1.2.49-2.dsc
6ffa1372fdfa2bf6a0a66ef74e6fd12f5a77c253 16262 libpng_1.2.49-2.debian.tar.bz2
e5fa19c859efaa6598fedfa318c3f640d1e250c3 192584 libpng12-0_1.2.49-2_i386.deb
98f8e7769323c9a6e8052a914c8bfd41bc45c886 266520 libpng12-dev_1.2.49-2_i386.deb
111eb804942151a3f956b09631f0a760ff629fa0 950 libpng3_1.2.49-2_i386.deb
2558d734573c536b75aec2fb9444e96760f0c817 65642
libpng12-0-udeb_1.2.49-2_i386.udeb
Checksums-Sha256:
dead8ca1ac9e98a42e47f541626757acd0edeff808f509a93f67133124b6ce01 1976
libpng_1.2.49-2.dsc
8b2ba4ff90f22e053f78cad0f2e6a6da18f918fc77c82f832b26cf5c80c82cd7 16262
libpng_1.2.49-2.debian.tar.bz2
64a1a942c269dd4244d56fbc70cf1bdd6a9077613104c2bff3b3e7f1ccec9e69 192584
libpng12-0_1.2.49-2_i386.deb
c7ae11beb08b591227446d7f0c3b97a76a69056b4f734f80be32c456032941b7 266520
libpng12-dev_1.2.49-2_i386.deb
79ede9bc00a771e0606ca41f2d68c1f0d635b8f73250162e2b8e815f1b6099cd 950
libpng3_1.2.49-2_i386.deb
9ddb088fc57390bd8af8d986e1534eded685fd1122f3a77598ad018cc658bc06 65642
libpng12-0-udeb_1.2.49-2_i386.udeb
Files:
95e63b73983de317b92ae7da0584acf1 1976 libs optional libpng_1.2.49-2.dsc
b2de221850585a701fcc9ae7913971fd 16262 libs optional
libpng_1.2.49-2.debian.tar.bz2
06b6c28e6578161b481bacb2e46bb4c7 192584 libs optional
libpng12-0_1.2.49-2_i386.deb
9cfd0bd88df156d6e49684cda2fcbf17 266520 libdevel optional
libpng12-dev_1.2.49-2_i386.deb
29a27a590305d667b9adfaad07f61cd8 950 oldlibs optional libpng3_1.2.49-2_i386.deb
2a5ecdfa885e04d917c321f9752cbf63 65642 debian-installer extra
libpng12-0-udeb_1.2.49-2_i386.udeb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQIcBAEBCAAGBQJP/4wkAAoJEHxWrP6UeJfYFIoP/0OfMomjPC8hoJeF69b6KLRL
EOvmubk2Qro2GdsobQc+R2SQvcqMOIZRjJMGtTxrxuH1vYzhfAwgkg6VCqtjNcoe
DIuTJ/DirBEC/XmS45mS6CvxHkguefic8fxuSDtOZTIIYzS1h6klk8UNCTrNM+LJ
1jS4jqkIBpaWCZQN+a4g0xB+YuVcEzVTUUMgS8TOphpooFzNrc1ygNN8Jr95Zu/y
sy69cv60PA5uCVMc/0EzlnHBcyCVdZVd36OPykwBs4eJRYuJd8G0yzcbxpOyPoW9
Wf+3rh82R90f15X7zi9T2gAXZHtuIxAeYxgl/7dgnAdf97e7F+9yMWqstbK2Swto
MmaHWJ4ze/aUa3KO6GYWdj/vhbGR/wQSi8wXjACHs1NCBQ8i4HDIkXAm2x/ifjCe
flxR4pzIhe0UKYs2OkD8q8+DhpxtSQ8/S5D75TIMDQF8mvqpIC3iCUl8X1wyrcvK
iwtIszAarQ0ub1ZMjujUl1WwnnKPU32uOGvMWFu9tF4pYpTBuqJfyTrANFbEJth1
XDoEUtKUrHY79AhYqjlr/lHXq675LYGWjzEi8bPtXv6JUBjOpwYdB6Y8fjBcbbO1
URMu6LNnpcKfZWYrZZJQa6waAGTj1ksruqJ+/sI5emibq5+foTI/Yr1emYuSlDqf
FiCQX9wHVkhnk+ywwLDb
=cDSg
-----END PGP SIGNATURE-----
--- End Message ---
