Your message dated Sat, 31 Dec 2011 13:57:34 +0000
with message-id <[email protected]>
and subject line Bug#627936: fixed in movabletype-opensource 4.2.3-1+lenny3
has caused the Debian Bug report #627936,
regarding movabletype-opensource: Unspecified security vulnerabilities fixed in
4.36
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
627936: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627936
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: movabletype-opensource
Version: 4.3.5+dfsg-3
Severity: grave
Tags: security
Justification: user security hole
As reported in
<http://www.movabletype.org/2011/05/movable_type_51_and_505_436_security_update.html>
Quote:
"A remote attacker could execute arbitrary code in a logged-in users' web
browser. A remote attacker could read or modify the contents in the system
under certain circumstances."
--- End Message ---
--- Begin Message ---
Source: movabletype-opensource
Source-Version: 4.2.3-1+lenny3
We believe that the bug you reported is fixed in the latest version of
movabletype-opensource, which is due to be installed in the Debian FTP archive:
movabletype-opensource_4.2.3-1+lenny3.diff.gz
to main/m/movabletype-opensource/movabletype-opensource_4.2.3-1+lenny3.diff.gz
movabletype-opensource_4.2.3-1+lenny3.dsc
to main/m/movabletype-opensource/movabletype-opensource_4.2.3-1+lenny3.dsc
movabletype-opensource_4.2.3-1+lenny3_all.deb
to main/m/movabletype-opensource/movabletype-opensource_4.2.3-1+lenny3_all.deb
movabletype-plugin-core_4.2.3-1+lenny3_all.deb
to
main/m/movabletype-opensource/movabletype-plugin-core_4.2.3-1+lenny3_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dominic Hargreaves <[email protected]> (supplier of updated movabletype-opensource
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 29 May 2011 10:51:20 +0100
Source: movabletype-opensource
Binary: movabletype-opensource movabletype-plugin-core
Architecture: source all
Version: 4.2.3-1+lenny3
Distribution: oldstable-security
Urgency: high
Maintainer: Dominic Hargreaves <[email protected]>
Changed-By: Dominic Hargreaves <[email protected]>
Description:
movabletype-opensource - A well-known blogging engine
movabletype-plugin-core - Core Movable Type plugins
Closes: 627936
Changes:
movabletype-opensource (4.2.3-1+lenny3) oldstable-security; urgency=high
.
* Apply patch from 4.36 fixing various security vulnerabilities
(closes: #627936)
Checksums-Sha1:
9f8f375b04c4a316f5af88a477b0cec339956298 1217
movabletype-opensource_4.2.3-1+lenny3.dsc
ea0ed68488209a5a38423a9a735282b569d26281 4223108
movabletype-opensource_4.2.3.orig.tar.gz
6d5f572d89ac74f435f99c7e2fde9a573a1fb3e8 25565
movabletype-opensource_4.2.3-1+lenny3.diff.gz
c48a44582abed199c261f41e43cca8380bfbf525 2946126
movabletype-opensource_4.2.3-1+lenny3_all.deb
75fa0194048be7aebfc3cc56052713c485676588 166102
movabletype-plugin-core_4.2.3-1+lenny3_all.deb
Checksums-Sha256:
5f68ec9273e491c17a2251810678834181012de9e8e76abc7c074c3cfb44002c 1217
movabletype-opensource_4.2.3-1+lenny3.dsc
dab572295fe4f31618f6d9fb6369e6f8d59173c591decf29e2235475f94007ce 4223108
movabletype-opensource_4.2.3.orig.tar.gz
8f5bed0c329ddb4bf2c8bbb548076e7ac300c0c360cee27e823673e13e46bed7 25565
movabletype-opensource_4.2.3-1+lenny3.diff.gz
37a0dad2bd572270cf4dfea0b71012af924bc67f178bdbaa2eb3a20c3dc0c838 2946126
movabletype-opensource_4.2.3-1+lenny3_all.deb
d380117a35b1ff788eae3d9d70607ca85ffe08da36f185b98423aecae4fc1cbe 166102
movabletype-plugin-core_4.2.3-1+lenny3_all.deb
Files:
5a6c07e6e4c859c197ba263558e39816 1217 web optional
movabletype-opensource_4.2.3-1+lenny3.dsc
b0d882a95b9d3f3416b409c14e4c4b64 4223108 web optional
movabletype-opensource_4.2.3.orig.tar.gz
691ec910896d101b64dd8f5ce3e941b2 25565 web optional
movabletype-opensource_4.2.3-1+lenny3.diff.gz
983f85e8657b2e29297301d58f0614aa 2946126 web optional
movabletype-opensource_4.2.3-1+lenny3_all.deb
97862c4d7d230cfc65b483ef681210c8 166102 web optional
movabletype-plugin-core_4.2.3-1+lenny3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iD8DBQFN4hh1YzuFKFF44qURAsdYAKDzgXPe9Bkni1t3wUQZINr+JrNSbwCguuD4
MwPyezIxBkQyedtUJLakFYM=
=0dRP
-----END PGP SIGNATURE-----
--- End Message ---
