Your message dated Tue, 26 Mar 2024 14:55:50 +0000
with message-id <e1rp8do-001yug...@fasolo.debian.org>
and subject line Bug#1049887: fixed in xfaces 3.3-30.1
has caused the Debian Bug report #1049887,
regarding xfaces: possible real-world data leak in alla.db
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1049887: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1049887
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: xfaces
Version: 3.3-3
Severity: serious
Tags: security
X-Debbugs-Cc: secur...@debian.org
This source package contains a file alla.db with names and email
addresses that appear to be real-world data. It is not used by the
program or tests, so I assume it slipped in. I am going to remove it
with a NMU and am copying the Security Team. Maybe Debian should do
something about it (informing the people).
--- End Message ---
--- Begin Message ---
Source: xfaces
Source-Version: 3.3-30.1
Done: Bastian Germann <b...@debian.org>
We believe that the bug you reported is fixed in the latest version of
xfaces, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1049...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bastian Germann <b...@debian.org> (supplier of updated xfaces package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 26 Mar 2024 12:22:11 +0000
Source: xfaces
Architecture: source
Version: 3.3-30.1
Distribution: unstable
Urgency: high
Maintainer: Hakan Ardo <ha...@debian.org>
Changed-By: Bastian Germann <b...@debian.org>
Closes: 1049887
Changes:
xfaces (3.3-30.1) unstable; urgency=high
.
* Non-maintainer upload
* Drop suspicious 1 and alla.db files (closes: #1049887)
Checksums-Sha1:
4eb3ca1c5f4a8fb264678133f7e13dc95ed3d032 1584 xfaces_3.3-30.1.dsc
aff9e039991c2f20e22266fda91c1aaccdf63358 24046 xfaces_3.3-30.1.diff.gz
5fcfc9d2139b85ba4bbd154c8140443cee012d3c 6918 xfaces_3.3-30.1_source.buildinfo
Checksums-Sha256:
c927d7f855b84838703c007715da20340272c26f3c7a6ddf9a81501b361c3cf1 1584
xfaces_3.3-30.1.dsc
ee0203f692230593bc97283c96d5fbccdbadab9e84c346cf0c970ebdb5974578 24046
xfaces_3.3-30.1.diff.gz
c930d0891ca9bb07642f008de3a73085caa37ce0be70f4739b83bd359aeffa26 6918
xfaces_3.3-30.1_source.buildinfo
Files:
07e0100872366dbde7913c1fa44dd158 1584 mail optional xfaces_3.3-30.1.dsc
1df7a7fb24d089d160df89a5fd61347f 24046 mail optional xfaces_3.3-30.1.diff.gz
1f23490fdc1b232d73c1efbfea2d0314 6918 mail optional
xfaces_3.3-30.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=x7Iz
-----END PGP SIGNATURE-----
pgpqos__1FLp9.pgp
Description: PGP signature
--- End Message ---
