Package: elog
Version: 2.9.2+2014.05.11git44800a7-2+deb8u1
Severity: grave
Justification: renders package unusable

Hi,
  A day or so ago elog was updated with the Debian change from 8.6 to 8.7 .  

  Afterwards only users listed as "admin" in the elog.cfg file could log in. 
Everyone else
would receive the error message "Use has no access to this logbook".
  Upgrading to 3.1.2 in stretch allows login again.
  
  A guess is that the patch for CVE-2016-6342 was not quite correct. :)

Thanks for packaging!
C.

-- System Information:
Debian Release: 8.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages elog depends on:
ii  adduser      3.113+nmu3
ii  libc6        2.19-18+deb8u7
ii  libkrb5-3    1.12.1+dfsg-19+deb8u2
ii  libssl1.0.0  1.0.1t-1+deb8u5
ii  net-tools    1.60-26+b1

Versions of packages elog recommends:
ii  imagemagick  8:6.8.9.9-5+deb8u6

Versions of packages elog suggests:
pn  fckeditor  <none>

-- Configuration Files:
/etc/elog.conf changed [not included]

-- no debconf information

Reply via email to