Your message dated Thu, 13 Jan 2011 21:47:05 +0000
with message-id <[email protected]>
and subject line Bug#606370: fixed in libcgi-pm-perl 3.49-1squeeze1
has caused the Debian Bug report #606370,
regarding CVE-2010-2761 CVE-2010-4410 CVE-2010-4411
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
606370: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606370
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libcgi-pm-perl
Version: 3.49-1
Severity: grave
Tags: security
Three security issues have been reported in libcgi-pm-perl:
http://security-tracker.debian.org/tracker/CVE-2010-2761
http://security-tracker.debian.org/tracker/CVE-2010-4410
http://security-tracker.debian.org/tracker/CVE-2010-4411
The first two issues are fixed in 3.50 (already in sid), but
the second is still pending a final fix (see the referenced
link). Please get in touch with the release team to check,
whether migrating 3.50 plus the fix for CVE-2010-4411 or
uploading a tpu fix with 3.49 plus the security fixes is the
best way to resolve this.
Cheers,
Moritz
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15@euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash
--- End Message ---
--- Begin Message ---
Source: libcgi-pm-perl
Source-Version: 3.49-1squeeze1
We believe that the bug you reported is fixed in the latest version of
libcgi-pm-perl, which is due to be installed in the Debian FTP archive:
libcgi-pm-perl_3.49-1squeeze1.diff.gz
to main/libc/libcgi-pm-perl/libcgi-pm-perl_3.49-1squeeze1.diff.gz
libcgi-pm-perl_3.49-1squeeze1.dsc
to main/libc/libcgi-pm-perl/libcgi-pm-perl_3.49-1squeeze1.dsc
libcgi-pm-perl_3.49-1squeeze1_all.deb
to main/libc/libcgi-pm-perl/libcgi-pm-perl_3.49-1squeeze1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libcgi-pm-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 13 Jan 2011 22:35:30 +0100
Source: libcgi-pm-perl
Binary: libcgi-pm-perl
Architecture: source all
Version: 3.49-1squeeze1
Distribution: testing-proposed-updates
Urgency: high
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description:
libcgi-pm-perl - module for Common Gateway Interface applications
Closes: 606370
Changes:
libcgi-pm-perl (3.49-1squeeze1) testing-proposed-updates; urgency=high
.
* [SECURITY] Add a patch with the backported fixes for CVE-2010-2761,
CVE-2010-4410, and CVE-2010-4411; thanks to Niko Tyni for preparing the
patch (closes: #606370).
Checksums-Sha1:
b86b454a73b9533b8dc3a811abb750820f030ac1 2124 libcgi-pm-perl_3.49-1squeeze1.dsc
e23ec179cf38ae31b8a7dadb9b7252d03ce6f31a 5311
libcgi-pm-perl_3.49-1squeeze1.diff.gz
0e2b40bf1b165fe30e0befbbfb552bb86c086d40 224568
libcgi-pm-perl_3.49-1squeeze1_all.deb
Checksums-Sha256:
333e9ebf69756aa6dea4f75b6333e054130b77b2786887201dde300d04ad6f97 2124
libcgi-pm-perl_3.49-1squeeze1.dsc
1a056fd63d13f8fd1963bc5d8c1aad87f82f032d344908b0d8b2537070e05dba 5311
libcgi-pm-perl_3.49-1squeeze1.diff.gz
5dbfce56c2297a3fa08137c211d2bd79c1ad649a1f355980ee67f362f97f3923 224568
libcgi-pm-perl_3.49-1squeeze1_all.deb
Files:
dbb627e198a59ba47bd91d8d7ff05f60 2124 perl optional
libcgi-pm-perl_3.49-1squeeze1.dsc
547c35539b17be780c4d9f8577674040 5311 perl optional
libcgi-pm-perl_3.49-1squeeze1.diff.gz
b6480ec3bd9800de34dc5b07f58cd545 224568 perl optional
libcgi-pm-perl_3.49-1squeeze1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)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=oN0q
-----END PGP SIGNATURE-----
--- End Message ---
