Your message dated Sun, 10 Nov 2013 19:02:50 +0100
with message-id
<cab4xwxz8gcuuojykxoce3ycrhwgmicuek+9by6hc3zkzjkl...@mail.gmail.com>
and subject line Re: Bug#729240: reportbug can't report security bugs because
Debian's SMTP server is misconfigured
has caused the Debian Bug report #729240,
regarding reportbug can't report security bugs because Debian's SMTP server is
misconfigured
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
729240: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729240
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: reportbug
Version: 6.4.4
Severity: normal
Dear Maintainer,
When reporting security bugs, reportbug sends an email to
[email protected].
However, the Debian's SMTP server where reportbug tries to connect is
misconfigured to reject email to [email protected].
How to reproduce the bug:
start reportbug -u gtk2
click on Continue
type 'nbd-server'
click on Continue
there's a question 'Your version (1:3.2-4~deb7u3) of nbd-server appears to be
out of date. The following newer release(s) are available in the Debian
archive: unstable: 1:3.4-2 Do you still want to file a report'
click on Yes
click on Continue
notification 'The following debconf settings were detected:'
click on No
there's 'Briefly describe the problem'
write 'improper authfile parsing, nbd-server allows access for unauthorized
clients'
click on Continue
click on critical
click on Continue
click on 'root security hole'
click on Continue
click on security
click on Continue
a notification 'Are you reporting an undisclosed vulnerability? If so, in order
to responsibly disclose the issue, it should not be sent to the public BTS
right now, but instead to the private Security Team mailing list.'
click on Yes
there's a text field
write the description of the bug to the field
click on Continue
click on 'Submit the bug report via email'
you get an error: 'SMTP send failure: {'[email protected]': (550, 'relay
not permitted')}. Do you want to retry (or else save the report and exit)?'
it is impossible to submit the bug, if I click 'Yes', I get the same error
again
-- Package-specific info:
** Environment settings:
EDITOR="vi"
INTERFACE="gtk2"
** /home/mikulas/.reportbugrc:
reportbug_version "6.4.4"
mode standard
ui text
email "[email protected]"
no-cc
header "X-Debbugs-CC: [email protected]"
smtphost reportbug.debian.org
-- System Information:
Debian Release: 7.2
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i586)
Kernel: Linux 3.11.7 (PREEMPT)
Locale: LANG=cs_CZ.UTF8, LC_CTYPE=cs_CZ.UTF8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages reportbug depends on:
ii apt 0.9.7.9
ii python 2.7.3-4+deb7u1
ii python-reportbug 6.4.4
reportbug recommends no packages.
Versions of packages reportbug suggests:
pn claws-mail <none>
pn debconf-utils <none>
pn debsums <none>
pn dlocate <none>
pn emacs22-bin-common | emacs23-bin-common <none>
ii file 5.11-2
ii gnupg 1.4.12-7+deb7u2
pn postfix | exim4 | mail-transport-agent <none>
ii python-gtk2 2.24.0-3+b1
ii python-gtkspell 2.25.3-12
ii python-urwid 1.0.1-2
ii python-vte 1:0.28.2-5
ii xdg-utils 1.1.0~rc1+git20111210-6
Versions of packages python-reportbug depends on:
ii apt 0.9.7.9
ii python 2.7.3-4+deb7u1
ii python-debian 0.1.21
ii python-debianbts 1.11
ii python-support 1.0.15
python-reportbug suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Hello,
as reported in /usr/share/doc/reportbug/README.Users.gz
```
Let us also clarify that this service is in no way controlled by
reportbug maintainers, so in case any questions/complains/information
requests you have to contact [email protected] .
```
So please do that.
Regards,
Sandro
On Sun, Nov 10, 2013 at 6:51 PM, Mikulas Patocka
<[email protected]> wrote:
> Package: reportbug
> Version: 6.4.4
> Severity: normal
>
> Dear Maintainer,
>
> When reporting security bugs, reportbug sends an email to
> [email protected].
> However, the Debian's SMTP server where reportbug tries to connect is
> misconfigured to reject email to [email protected].
>
> How to reproduce the bug:
> start reportbug -u gtk2
> click on Continue
> type 'nbd-server'
> click on Continue
> there's a question 'Your version (1:3.2-4~deb7u3) of nbd-server appears to be
> out of date. The following newer release(s) are available in the Debian
> archive: unstable: 1:3.4-2 Do you still want to file a report'
> click on Yes
> click on Continue
> notification 'The following debconf settings were detected:'
> click on No
> there's 'Briefly describe the problem'
> write 'improper authfile parsing, nbd-server allows access for unauthorized
> clients'
> click on Continue
> click on critical
> click on Continue
> click on 'root security hole'
> click on Continue
> click on security
> click on Continue
> a notification 'Are you reporting an undisclosed vulnerability? If so, in
> order
> to responsibly disclose the issue, it should not be sent to the public BTS
> right now, but instead to the private Security Team mailing list.'
> click on Yes
> there's a text field
> write the description of the bug to the field
> click on Continue
> click on 'Submit the bug report via email'
>
>
> you get an error: 'SMTP send failure: {'[email protected]': (550,
> 'relay
> not permitted')}. Do you want to retry (or else save the report and exit)?'
> it is impossible to submit the bug, if I click 'Yes', I get the same error
> again
>
>
>
> -- Package-specific info:
> ** Environment settings:
> EDITOR="vi"
> INTERFACE="gtk2"
>
> ** /home/mikulas/.reportbugrc:
> reportbug_version "6.4.4"
> mode standard
> ui text
> email "[email protected]"
> no-cc
> header "X-Debbugs-CC: [email protected]"
> smtphost reportbug.debian.org
>
> -- System Information:
> Debian Release: 7.2
> APT prefers stable-updates
> APT policy: (500, 'stable-updates'), (500, 'stable')
> Architecture: i386 (i586)
>
> Kernel: Linux 3.11.7 (PREEMPT)
> Locale: LANG=cs_CZ.UTF8, LC_CTYPE=cs_CZ.UTF8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
>
> Versions of packages reportbug depends on:
> ii apt 0.9.7.9
> ii python 2.7.3-4+deb7u1
> ii python-reportbug 6.4.4
>
> reportbug recommends no packages.
>
> Versions of packages reportbug suggests:
> pn claws-mail <none>
> pn debconf-utils <none>
> pn debsums <none>
> pn dlocate <none>
> pn emacs22-bin-common | emacs23-bin-common <none>
> ii file 5.11-2
> ii gnupg 1.4.12-7+deb7u2
> pn postfix | exim4 | mail-transport-agent <none>
> ii python-gtk2 2.24.0-3+b1
> ii python-gtkspell 2.25.3-12
> ii python-urwid 1.0.1-2
> ii python-vte 1:0.28.2-5
> ii xdg-utils 1.1.0~rc1+git20111210-6
>
> Versions of packages python-reportbug depends on:
> ii apt 0.9.7.9
> ii python 2.7.3-4+deb7u1
> ii python-debian 0.1.21
> ii python-debianbts 1.11
> ii python-support 1.0.15
>
> python-reportbug suggests no packages.
>
> -- no debconf information
>
--
Sandro Tosi (aka morph, morpheus, matrixhasu)
My website: http://matrixhasu.altervista.org/
Me at Debian: http://wiki.debian.org/SandroTosi
--- End Message ---
_______________________________________________
Reportbug-maint mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reportbug-maint
