Your message dated Fri, 04 Oct 2013 23:33:24 +0000
with message-id <[email protected]>
and subject line Bug#709069: fixed in python-tornado 2.4.1-3
has caused the Debian Bug report #709069,
regarding python(3)-tornado: possible abuse of match_hostname() for DoS usings
certs with many wildcards
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
709069: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709069
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: python3
Version: 3.2.3-6
Severity: normal
Tags: security
CVE request: http://www.openwall.com/lists/oss-security/2013/05/15/6
Upstream: http://bugs.python.org/issue17980
---
Henri Salo
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: python-tornado
Source-Version: 2.4.1-3
We believe that the bug you reported is fixed in the latest version of
python-tornado, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andrew Starr-Bochicchio <[email protected]> (supplier of updated python-tornado
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 04 Oct 2013 19:18:05 -0400
Source: python-tornado
Binary: python-tornado python3-tornado
Architecture: source all
Version: 2.4.1-3
Distribution: unstable
Urgency: low
Maintainer: Debian Python Modules Team
<[email protected]>
Changed-By: Andrew Starr-Bochicchio <[email protected]>
Description:
python-tornado - scalable, non-blocking web server and tools
python3-tornado - scalable, non-blocking web server and tools - Python 3
package
Closes: 709069
Changes:
python-tornado (2.4.1-3) unstable; urgency=low
.
* Team upload.
.
[ Jakub Wilk ]
* Run tests only if DEB_BUILD_OPTIONS=nocheck is not set.
.
[ Andrew Starr-Bochicchio ]
* Backport fix for CVE 2013-2009. Avoid allowing multiple
wildcards in a single SSL cert hostname segment (Closes: #709069).
Checksums-Sha1:
87f4c6c4f4f3a52fb0c70d91e7f38892f8617b81 2235 python-tornado_2.4.1-3.dsc
bebaf1c8da4387b66c453c57c41316058e780826 15213
python-tornado_2.4.1-3.debian.tar.gz
4b3518ca8c9747797c7e2bf91df7d47af8c65b6a 184958 python-tornado_2.4.1-3_all.deb
80e996b4dd07712fe6cc5fbed2f75d8a6cce6009 152242 python3-tornado_2.4.1-3_all.deb
Checksums-Sha256:
8b658fbb198961ffddce9f03b43f2881cb334b21363253c1d637aad552e23436 2235
python-tornado_2.4.1-3.dsc
85a2a2ffe10e1a9b7132ae777900f650e564692d4956070fa44bdeed2f4d9d91 15213
python-tornado_2.4.1-3.debian.tar.gz
73cf95aa41598ef79a7a526c3e33048c29511e261789858535e552e8d9eb3233 184958
python-tornado_2.4.1-3_all.deb
34fcf47cf47cff725ed86439d835de5eac7bf6c5209eff90d6bb4c3bacb9dbea 152242
python3-tornado_2.4.1-3_all.deb
Files:
9234adda7f3b14a60c4479dca75038e8 2235 web optional python-tornado_2.4.1-3.dsc
155408fc0b9e063bed83c7c3a4a4193e 15213 web optional
python-tornado_2.4.1-3.debian.tar.gz
bd04a2ec4c3b87cd7d568a511b544dcb 184958 web optional
python-tornado_2.4.1-3_all.deb
c1f570b584526e0384532e27ceda7ef5 152242 web optional
python3-tornado_2.4.1-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)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=zRGG
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
Python-modules-team mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
