Your message dated Sun, 28 Mar 2021 06:03:32 +0000
with message-id <[email protected]>
and subject line Bug#985596: fixed in emboss 6.6.0+dfsg-9
has caused the Debian Bug report #985596,
regarding emboss has mailcap entries with quoted %-escapes
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
985596: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985596
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: emboss
Version: 6.6.0+dfsg-8
Tags: patch, security
Dear Maintainer,
the emboss package has mailcap entries with quoted %-escapes. That is
considered unsafe. Proper escaping should be left to the programs using the
entry.
This Lintian tag is triggered:
https://lintian.debian.org/tags/quoted-placeholder-in-mailcap-entry.html
See also grave bug #930908, which was recently closed because "a Lintian test
already exists":
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=930908
I'm using the "security" tag because the affected rules in combination with
certain mail user agents (or document openers) are the cause of a shell command
injection vulnerability.
If you need more information let me know.
Thanks,
MNZ
diff --git a/debian/emboss.mime b/debian/emboss.mime
index 38db622..1a7017f 100644
--- a/debian/emboss.mime
+++ b/debian/emboss.mime
@@ -1,6 +1,6 @@
-application/vnd.appliedbiosystems.abif; abiview -auto '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1
-application/x-dna; abiview -auto '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1
-application/abi1; abiview -auto '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1
-application/vnd.appliedbiosystems.abif; seqret -filter '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
-application/x-dna; seqret -filter '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
-application/abi1; seqret -filter '%s' ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
+application/vnd.appliedbiosystems.abif; abiview -auto %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1
+application/x-dna; abiview -auto %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1
+application/abi1; abiview -auto %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1
+application/vnd.appliedbiosystems.abif; seqret -filter %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
+application/x-dna; seqret -filter %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
+application/abi1; seqret -filter %s ; description=ABIF Applied Biosystems Inc. chromatogram; nametemplate=%s.ab1 ; copiousoutput
--- End Message ---
--- Begin Message ---
Source: emboss
Source-Version: 6.6.0+dfsg-9
Done: Charles Plessy <[email protected]>
We believe that the bug you reported is fixed in the latest version of
emboss, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Charles Plessy <[email protected]> (supplier of updated emboss package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Mar 2021 13:46:29 +0900
Source: emboss
Architecture: source
Version: 6.6.0+dfsg-9
Distribution: unstable
Urgency: medium
Maintainer: Debian Med Packaging Team
<[email protected]>
Changed-By: Charles Plessy <[email protected]>
Closes: 985596
Changes:
emboss (6.6.0+dfsg-9) unstable; urgency=medium
.
7a121b7 Remove quotes in mailcap entries.
Thanks to Marriott NZ <[email protected]> (Closes: #985596)
Checksums-Sha1:
7c730eeae5ab0bb76545eee6bdb8f70c87e0f7b2 2462 emboss_6.6.0+dfsg-9.dsc
b0b652fde6ad43342011438428cbf4c7788c9cf3 248612
emboss_6.6.0+dfsg-9.debian.tar.xz
0b693f4ee00b9291cbde4bd3a307d871fb42d43d 11175
emboss_6.6.0+dfsg-9_source.buildinfo
Checksums-Sha256:
1a2fefdd1f275e00e23325205aa79c57acbbbd0d79363dfd531184f36b3f2362 2462
emboss_6.6.0+dfsg-9.dsc
77b4cbb2887e9ca1740ddeec67257ce396237aace9cbd5878187fb0ed6e34f1f 248612
emboss_6.6.0+dfsg-9.debian.tar.xz
e7d6046250d9c34d7adbc9d558ea51fa6a9432f4c8d503832b3c447b3d683073 11175
emboss_6.6.0+dfsg-9_source.buildinfo
Files:
9e034c092797a4e66e584991f6d59604 2462 science optional emboss_6.6.0+dfsg-9.dsc
f8dae0228aba8a2ddaf95624d37b4690 248612 science optional
emboss_6.6.0+dfsg-9.debian.tar.xz
a9aa265d4e3f7ca714cc49c85a879d96 11175 science optional
emboss_6.6.0+dfsg-9_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=pEB8
-----END PGP SIGNATURE-----
--- End Message ---
