Your message dated Sun, 30 Dec 2018 09:49:50 +0000 with message-id <[email protected]> and subject line Bug#855539: fixed in logwatch 7.5.0-1 has caused the Debian Bug report #855539, regarding logwatch: Excessive unmatched entries in SSHD section of logwatch to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 855539: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=855539 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: logwatch Version: 7.4.3+git20161207-2 Severity: normal Dear Maintainer, upgrading from Debian jessie to stretch results in excessive unmatched entries in the SSHD section of logwatch output. Example: Failed logins from: normal number (e.g. 12) of lines in the format: IP-address (Hostname): X times Illegal users from: normal number (e.g. 6) of lines in the format: IP-address (Hostname): X times Received disconnect: [preauth] : 1357 Time(s) Bye Bye [preauth] : 24 Time(s) Closed due to user request. [preauth] : 22 Time(s) disconnected by user [preauth] : 1 Time(s) **Unmatched Entries** hundreds/thousands of lines like this: Disconnected from XXX.XXX.XXX.XXX port XXXXXX [preauth] : 1 time(s) This seems to be due to missing backports of upstream fixes for new SSHD log file format, see also https://bugs.launchpad.net/ubuntu/+source/logwatch/+bug/1644057 Expected: only summary in "Received disconnect", limited number of "unmatched entries" -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages logwatch depends on: ii exim4-daemon-light [mail-transport-agent] 4.88-5 pn perl:any <none> Versions of packages logwatch recommends: ii libdate-manip-perl 6.57-1 ii libsys-cpu-perl 0.61-2+b1 ii libsys-meminfo-perl 0.99-1 Versions of packages logwatch suggests: pn fortune-mod <none> -- no debconf information
--- End Message ---
--- Begin Message ---Source: logwatch Source-Version: 7.5.0-1 We believe that the bug you reported is fixed in the latest version of logwatch, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Willi Mann <[email protected]> (supplier of updated logwatch package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 30 Dec 2018 10:17:30 +0100 Source: logwatch Binary: logwatch Architecture: source Version: 7.5.0-1 Distribution: unstable Urgency: medium Maintainer: Willi Mann <[email protected]> Changed-By: Willi Mann <[email protected]> Description: logwatch - log analyser with nice output written in Perl Closes: 824034 855539 886000 905018 906045 907512 915617 Changes: logwatch (7.5.0-1) unstable; urgency=medium . * New upstream version - closes: 855539 fixed unmatched entries in SSH - closes: 905018 match postfix-policyd-spf-python logs - closes: 915617 make regex compatible with newer perl versions - closes: 824034 fixes handling of ignore_services handling in secure * d/control: Remove Suggests on fortune-mod as the zz-fortune script was removed * d/control: update standards version 4.1.4 -> 4.3.0 (no changes) * exim: parse 'SMTP protocol error in "AUTH LOGIN"' lines, closes: 886000 * dovecot: adapt for newer sieve log format, closes: 906045 * secure: Ignore systemd "Session \d+ logged out" messages, closes: 907512 * dovecot: Ignore diagnostic mailbox operation logging. Checksums-Sha1: 559b351994c8f73432ef9f9a6577da0db8134d7f 1809 logwatch_7.5.0-1.dsc edb7eba2eb66e32ca4cf25a84adc605c769ae2c0 488019 logwatch_7.5.0.orig.tar.gz 4d37d33df240d0b642a207577435d7fe9fc5b84b 19600 logwatch_7.5.0-1.debian.tar.xz 1ff7f9cc6130407d31f33400379d4400cb303faf 6265 logwatch_7.5.0-1_source.buildinfo Checksums-Sha256: 13d879837402ab1d250404d95088ac6547b14682e74c01843af28b2dc598a5c0 1809 logwatch_7.5.0-1.dsc fe63181473979b36657d2a9395e7fbd694ff450be41b49a447a852c334ae580e 488019 logwatch_7.5.0.orig.tar.gz be4a0129eea9c740b2b6671a7c792cfba1962e9cc258a8defa9e5f7bbd64687f 19600 logwatch_7.5.0-1.debian.tar.xz d06cf36766bc64fa76859991daf0bc49ca7cba07608c8c8aaea706818339e610 6265 logwatch_7.5.0-1_source.buildinfo Files: 8a86a7eb670fc39b45994d1ce8108941 1809 admin optional logwatch_7.5.0-1.dsc b627d2abfd92724593c52dcc5b953878 488019 admin optional logwatch_7.5.0.orig.tar.gz 1807cccb67b848d6a2933a9109f03698 19600 admin optional logwatch_7.5.0-1.debian.tar.xz f9497b08093dcc0223748e47e660c395 6265 admin optional logwatch_7.5.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEn9+9KTfOyKJJ3U2cjL4hnHRXbYEFAlwojrQACgkQjL4hnHRX bYHKDhAAzML+nihjsrP51csWFVTGBupvjxtSfvSthWU+pnYjAMQIjdlqgHCObSVF 850UQIQY08HlXCwlViaKMC1g6DFYMmFQyokx1G1XstrfUL8RR0Y8L8tLEm9vpWjk zQ/BUfuXPT9rBOUug6SSb4/L7HMp1RPhR9wtHzdUIeEp2vmZxE+Yuq2XnGSQ8o/+ pR+NHRwewKQSJ7KRomUkfxtTikAxfus2e5ZAyNakx0U4IMKqgfAnWZD0GkgEtYf3 RZKGN7+rvMJFHEIT7i2mk/GgeBo14ktQzKzPNQGOGHYjtTmJ3mNrhBmCktrjXAn6 bxh/TPPGqFcQIG2Ja1L0oONc94sLTu3vE46Rk6bLPh5HxXAZbulSOeyQbhAQUAos qOtqbUmRym4JTD01ZYnxDO2ZsyU/DvRfXRMBwGIIb4OnRnXsEeNdUpKRr7JhEt5p iTgfElPW+WL86OEowwRGCgyH6JTEWIxpSqaQwbuej+ynMR8ySNfG93L2YM3/oI5U TkgSK3vPZAfygzKQ1AoV+CdAvDzvOHC1xvNrqOt2/JPPc8riwd80HS408HZ49g6B 2gw+yW1dRBv2pRkGq/c6HJCdRVTbPzSxLSf2UddymALp9zEPYh6BioLrvGQZuskt JVcfqD1TAsAtq18mXWuf2qtWrpVD6qpslkLKVIS7cVE3J5KS0gA= =JmQh -----END PGP SIGNATURE-----
--- End Message ---
