Your message dated Mon, 3 Sep 2018 15:33:03 +0200
with message-id <[email protected]>
and subject line Re: network-manager: CVE-2015-2924: IPv6 Hop limit lowering
via RA messages
has caused the Debian Bug report #783295,
regarding network-manager: CVE-2015-2924: IPv6 Hop limit lowering via RA
messages
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
783295: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783295
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: network-manager
Version: 0.9.10.0-7
Severity: normal
Tags: security upstream
Hi,
the following vulnerability was published for network-manager.
CVE-2015-2924[0]:
IPv6 Hop limit lowering via RA messages
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2015-2924
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1209902
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
On Wed, 20 Jan 2016 16:25:31 +0100 Salvatore Bonaccorso
<[email protected]> wrote:
> Hi Michael,
>
> Thanks for your reply.
>
> On Wed, Jan 20, 2016 at 04:01:22PM +0100, Michael Biebl wrote:
> > On Sat, 25 Apr 2015 15:08:19 +0200 Salvatore Bonaccorso
> > <[email protected]> wrote:
> > > Source: network-manager
> > > Version: 0.9.10.0-7
> > > Severity: normal
> > > Tags: security upstream
> > >
> > > Hi,
> > >
> > > the following vulnerability was published for network-manager.
> > >
> > > CVE-2015-2924[0]:
> > > IPv6 Hop limit lowering via RA messages
> > >
> > > If you fix the vulnerability please also make sure to include the
> > > CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
> > >
> > > For further information see:
> > >
> > > [0] https://security-tracker.debian.org/tracker/CVE-2015-2924
> > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1209902
> > >
> > > Please adjust the affected versions in the BTS as needed.
> >
> > The current versions in unstable/testing are not affected (fixed in
> > 1.0.2, marked accordingly)
>
> Thanks I have updated the security-tracker accordingly.
>
> > Do you consider this issue important enough for a stable-security
> > upload?
>
> We think it's not needed to release a fix via a DSA for it, but if you
> can, a fix via a stable point release would be great. Cf. the 'no-dsa'
> tag in https://security-tracker.debian.org/tracker/CVE-2015-2924 .
>
> Regards and thanks for your work,
Hm, this somehow fell through the cracks.
I'm not planing an old-stable upload myself now (for the simple reason
that I no longer have a jessie test system), but maybe the debian-lts
team is interested, so CCing them.
Regards,
Michael
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Pkg-utopia-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-utopia-maintainers
