Your message dated Sun, 3 Jul 2016 15:13:32 +0200
with message-id <[email protected]>
and subject line Re: CVE-2015-8842
has caused the Debian Bug report #825059,
regarding CVE-2015-8842
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
825059: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825059
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: systemd
Version: 215-17+deb8u4
Severity: important
Tags: security patch
As discussed on IRC it would be great if CVE-2015-8842 could be fixed
in a jessie point release. Please see here for further links:
https://security-tracker.debian.org/tracker/CVE-2015-8842
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Version: 215-1
Am 01.07.2016 um 17:28 schrieb Michael Biebl:
> This means, users who installed jessie from scratch and never had 214-1
> installed, won't be affected.
Or upgraded directly from wheezy to jessie
> Only if a (unstable) user had /var/log/journal enabled and 214-1
> installed in the past, he might end up with a systemd.journal which has
> the wrong permissions.
> The commit [1] basically fixes up borked permissions of existing
> system.journal files. And if he's an (up-to-date) unstable user, he has
> already received the update in 230-1.
>
> So, considering this, I don't think this will be an issue in practice
> and I think we can safely close this issue.
>
> Waiting for your confirmation though, before doing so.
After further consideration, I'm going to close this bug report.
The offending tmpfiles snippet was removed in 215, so we don't really
need the fixup from v229.
Moritz, can you mark the issue accordingly in the security tracker?
Regards,
Michael
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Pkg-systemd-maintainers mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-systemd-maintainers
