Your message dated Wed, 31 Mar 2021 08:19:23 +0000
with message-id <[email protected]>
and subject line unblock docx2txt
has caused the Debian Bug report #986169,
regarding unblock: docx2txt/1.4-5
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
986169: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986169
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: [email protected]
Usertags: unblock

Please unblock package docx2txt

[ Reason ]

Address security issue: do not quote %s in mailcap entry.
See: https://bugs.debian.org/985594

[ Impact ]

Potential security issue with crafted filename.

[ Tests ]

n/a

[ Risks ]

- Code is trivial.
- Leaf package.

[ Checklist ]
  [X] all changes are documented in the d/changelog
  [X] I reviewed all changes and I approve them
  [X] attach debdiff against the package in testing

[ Other info ]

It's a two-character change.

unblock docx2txt/1.4-5

diff -Nru docx2txt-1.4/debian/changelog docx2txt-1.4/debian/changelog
--- docx2txt-1.4/debian/changelog       2020-12-11 21:56:27.000000000 +0000
+++ docx2txt-1.4/debian/changelog       2021-03-20 17:13:44.000000000 +0000
@@ -1,3 +1,9 @@
+docx2txt (1.4-5) unstable; urgency=medium
+
+  * Address security issue: do not quote %s in mailcap entry (closes: #985594)
+
+ -- Barak A. Pearlmutter <[email protected]>  Sat, 20 Mar 2021 17:13:44 +0000
+
 docx2txt (1.4-4) unstable; urgency=medium
 
   * debian/rules does not require root
diff -Nru docx2txt-1.4/debian/docx2txt.mime docx2txt-1.4/debian/docx2txt.mime
--- docx2txt-1.4/debian/docx2txt.mime   2020-12-11 21:55:16.000000000 +0000
+++ docx2txt-1.4/debian/docx2txt.mime   2021-03-20 17:12:47.000000000 +0000
@@ -1 +1 @@
-application/vnd.openxmlformats-officedocument.wordprocessingml.document; 
docx2txt '%s' - ; copiousoutput; description=Office Open XML Document
+application/vnd.openxmlformats-officedocument.wordprocessingml.document; 
docx2txt %s - ; copiousoutput; description=Office Open XML Document

--- End Message ---
--- Begin Message ---
Unblocked.

--- End Message ---

Reply via email to