Your message dated Tue, 26 Apr 2005 11:17:24 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#305504: fixed in helix-player 1.0.4-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Apr 2005 11:59:27 +0000
>From [EMAIL PROTECTED] Wed Apr 20 04:59:27 2005
Return-path: <[EMAIL PROTECTED]>
Received: from panthera-systems.net [213.239.209.134]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DODrb-0007eX-00; Wed, 20 Apr 2005 04:59:27 -0700
Received: from [10.0.0.4] (84-72-171-50.dclient.hispeed.ch [84.72.171.50])
by panthera-systems.net (Postfix) with ESMTP id 6189F2DC020
for <[EMAIL PROTECTED]>; Wed, 20 Apr 2005 13:58:53 +0200 (CEST)
Message-ID: <[EMAIL PROTECTED]>
Date: Wed, 20 Apr 2005 13:59:23 +0200
From: Daniel Baumann <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Organization: Panthera Systems
User-Agent: Debian Thunderbird 1.0 (X11/20050116)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: Version 1.0.1 completely insecure, Version 1.0.4 is out
X-Enigmail-Version: 0.90.0.0
X-Enigmail-Supports: pgp-inline, pgp-mime
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: helix-player
Version: 1.0.1-1
Severity: serious
With 1.0.2, 1.0.3[0] and today with 1.0.4[1], grave security bugs are
fixed in helix-player. I already informed Thomas about it. Though he is
only reachable at weekends, we will organise who will upload a new
package soon.
Regards,
Daniel
[0] http://service.real.com/help/faq/security/050224_player
[1] http://service.real.com/help/faq/security/050419_player/EN/
--
Address: Daniel Baumann, Burgunderstrasse 3, CH-4562 Biberist
Email: [EMAIL PROTECTED]
Internet: http://people.panthera-systems.net/~daniel-baumann/
---------------------------------------
Received: (at 305504-close) by bugs.debian.org; 26 Apr 2005 15:21:37 +0000
>From [EMAIL PROTECTED] Tue Apr 26 08:21:37 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DQRsX-0003Un-00; Tue, 26 Apr 2005 08:21:37 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DQRoS-0008AU-00; Tue, 26 Apr 2005 11:17:24 -0400
From: Thomas Maurer <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#305504: fixed in helix-player 1.0.4-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Tue, 26 Apr 2005 11:17:24 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 3
Source: helix-player
Source-Version: 1.0.4-1
We believe that the bug you reported is fixed in the latest version of
helix-player, which is due to be installed in the Debian FTP archive:
helix-player_1.0.4-1.diff.gz
to pool/main/h/helix-player/helix-player_1.0.4-1.diff.gz
helix-player_1.0.4-1.dsc
to pool/main/h/helix-player/helix-player_1.0.4-1.dsc
helix-player_1.0.4-1_i386.deb
to pool/main/h/helix-player/helix-player_1.0.4-1_i386.deb
helix-player_1.0.4.orig.tar.gz
to pool/main/h/helix-player/helix-player_1.0.4.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thomas Maurer <[EMAIL PROTECTED]> (supplier of updated helix-player package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 25 Apr 2005 18:54:20 +0200
Source: helix-player
Binary: helix-player
Architecture: source i386
Version: 1.0.4-1
Distribution: unstable
Urgency: high
Maintainer: Thomas Maurer <[EMAIL PROTECTED]>
Changed-By: Thomas Maurer <[EMAIL PROTECTED]>
Description:
helix-player - The Helix Community's open source media player
Closes: 278146 291596 305504
Changes:
helix-player (1.0.4-1) unstable; urgency=high
.
* New upstream release. Solves security problems. (Closes: #305504)
* Closes another bug concerning new upstream. (Closes: #291596)
* Bug #278146 closed with 1.0.1-2, this closes it automatically (Closes:
#278146)
* Change architectures back to i386 and ppc to not hinder the security
fix from reaching sarge by unforseen complications
(Done by upload sponsor Frank Lichtenheld <[EMAIL PROTECTED]>
with maintainers blessing)
Files:
97e5ff74019ca8cb5be997b16d274727 896 graphics optional helix-player_1.0.4-1.dsc
a277710be35426b317869503a4ad36d7 18044552 graphics optional
helix-player_1.0.4.orig.tar.gz
20fbeaa3e48426927820f80d6840e59f 7061 graphics optional
helix-player_1.0.4-1.diff.gz
b3ad9ae9b67b044d592f6b104aca6da4 4288698 graphics optional
helix-player_1.0.4-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCblbEQbn06FtxPfARApUeAJ9vkiG2oSLF5QfvgzcD+J1uP4Oi7gCgyWp5
dvK5JxHUHPuJt/RowFALwx0=
=tpe6
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
