Your message dated Sat, 30 Jun 2018 17:34:48 +0000
with message-id <[email protected]>
and subject line Bug#887549: fixed in libsvn-notify-perl 2.86-2
has caused the Debian Bug report #887549,
regarding libsvn-notify-perl depends on libemail-address-perl
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
887549: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=887549
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libsvn-notify-perl
Version: 2.86-1
Severity: wishlist

Hi! Package libsvn-notify-perl depends on libemail-address-perl which is
vulnerable to CVE-2015-7686, see bug #868170. libemail-address-perl
provides perl module Email::Address which is now unmaintained. There is
a new perl module Email::Address::XS which is API compatible replacement
for Email::Address and is available in libemail-address-xs-perl. Please
port libsvn-notify-perl package to use libemail-address-xs-perl. If you need
help with porting let me know.

-- 
Pali Rohár
[email protected]

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: libsvn-notify-perl
Source-Version: 2.86-2

We believe that the bug you reported is fixed in the latest version of
libsvn-notify-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libsvn-notify-perl 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 30 Jun 2018 19:18:36 +0200
Source: libsvn-notify-perl
Binary: libsvn-notify-perl
Architecture: source
Version: 2.86-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Closes: 887549
Description: 
 libsvn-notify-perl - Subversion activity notification
Changes:
 libsvn-notify-perl (2.86-2) unstable; urgency=medium
 .
   [ gregor herrmann ]
   * debian/copyright: change Copyright-Format 1.0 URL to HTTPS.
   * debian/upstream/metadata: change GitHub/CPAN URL(s) to HTTPS.
 .
   [ Salvatore Bonaccorso ]
   * Update Vcs-* headers for switch to salsa.debian.org
 .
   [ gregor herrmann ]
   * Add 2 patches from upstream Git to change from Email::Address to
     Email::Address::XS.
     Thanks to Pali Rohár for the bug report and the pointer to the
     pull request. (Closes: #887549)
   * debian/control: libemail-address-perl → libemail-address-xs-perl.
   * Update years of packaging copyright.
   * Declare compliance with Debian Policy 4.1.4.
   * Bump debhelper compatibility level to 10.
   * Add default-mta to the mail-transport-agent Suggests, as suggested
     by lintian.
   * Enable autopkgtest's syntax.t.
Checksums-Sha1: 
 9a079d6af92ada4fef89e7472c810e7e366d9343 2336 libsvn-notify-perl_2.86-2.dsc
 9f0eaf82faecd446d6715d0be5748b91fb6bdb86 5348 
libsvn-notify-perl_2.86-2.debian.tar.xz
Checksums-Sha256: 
 edb18d85459d6269eb93537d1cf80e13347f6206febebbdd498b52a0a510a9a9 2336 
libsvn-notify-perl_2.86-2.dsc
 7de8920317d76c59b88e0ca3ced9c04ba8c7a53c01381f113df458ea433795ae 5348 
libsvn-notify-perl_2.86-2.debian.tar.xz
Files: 
 90fc131f2170af4f2860aa03c6271716 2336 perl optional 
libsvn-notify-perl_2.86-2.dsc
 84a270ee8a8a6ced6e52e649a65e8c6c 5348 perl optional 
libsvn-notify-perl_2.86-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=5Bs5
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to