Your message dated Sat, 28 Jan 2017 11:48:41 +0000
with message-id <[email protected]>
and subject line Bug#852934: fixed in s-nail 14.8.16-1
has caused the Debian Bug report #852934,
regarding s-nail: local root privilege escalation
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
852934: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852934
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: s-nail
Version: 14.8.14-3
Severity: grave
Tags: upstream security fixed-upstream
Hi
See http://www.openwall.com/lists/oss-security/2017/01/27/7 for
details.
https://www.mail-archive.com/[email protected]/msg00551.html
Commits:
https://git.sdaoden.eu/cgit/s-nail.git/commit/?id=f797c27efecad45af191c518b7f87fda32ada160
https://git.sdaoden.eu/cgit/s-nail.git/commit/?id=f2699449b66dd702a98925bd1b11153a6f7294bf
CVE requested at
http://www.openwall.com/lists/oss-security/2017/01/27/7
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: s-nail
Source-Version: 14.8.16-1
We believe that the bug you reported is fixed in the latest version of
s-nail, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hilko Bengen <[email protected]> (supplier of updated s-nail package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 28 Jan 2017 12:32:17 +0100
Source: s-nail
Binary: s-nail heirloom-mailx
Architecture: source
Version: 14.8.16-1
Distribution: unstable
Urgency: medium
Maintainer: Hilko Bengen <[email protected]>
Changed-By: Hilko Bengen <[email protected]>
Description:
heirloom-mailx - feature-rich BSD mail(1) -- transitional package
s-nail - feature-rich BSD mail(1)
Closes: 852934
Changes:
s-nail (14.8.16-1) unstable; urgency=medium
.
* New upstream version 14.8.16
- Fixes local root privilege escalation (Closes: #852934)
Checksums-Sha1:
5423ff67e794a2576534f49ce2faf7c2b85cbfcc 1987 s-nail_14.8.16-1.dsc
0b0b189fed307a525967128d3d05cacc5019ba4d 446108 s-nail_14.8.16.orig.tar.xz
0f61e76361f4b6a65857ff6f8293c81af96d804e 9728 s-nail_14.8.16-1.debian.tar.xz
afe35de67db393ec024dcde5141770211da74306 5963 s-nail_14.8.16-1_source.buildinfo
Checksums-Sha256:
041506b0b9d0d2edc9b8b2a4efea95d0ef3df30996259354cd98ae9aaf065538 1987
s-nail_14.8.16-1.dsc
9b6123499eea070d6f6c242661aed1522826d9fa78abc26d55e5dc2339b959df 446108
s-nail_14.8.16.orig.tar.xz
340fb05b1cb7a0dc2ecbf993c39ab03848841c838264e9b92ab57c45cdeb76e2 9728
s-nail_14.8.16-1.debian.tar.xz
0f7ed07d44fa4ac2755b644689e6672fc8c5e86112c1298d7dd5d92680eaec10 5963
s-nail_14.8.16-1_source.buildinfo
Files:
f7368755521045724a4e70f69e37a33b 1987 mail optional s-nail_14.8.16-1.dsc
ed43ea92b7586baf0dc681f68d2ff0f4 446108 mail optional
s-nail_14.8.16.orig.tar.xz
e0c131e30fa2da1c2ae1a36cb367fb3d 9728 mail optional
s-nail_14.8.16-1.debian.tar.xz
ae7c939a3a442f7ec12bc06bf5e8b4e4 5963 mail optional
s-nail_14.8.16-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Bn7b
-----END PGP SIGNATURE-----
--- End Message ---