Your message dated Sat, 16 Apr 2011 06:47:57 +0000
with message-id <e1qazit-0008do...@franck.debian.org>
and subject line Bug#622952: fixed in libmojolicious-perl 1.16-1
has caused the Debian Bug report #622952,
regarding libmojolicious-perl: Path security vulnerability
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
622952: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622952
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: libmojolicious-perl
Version: 0.999926-1
Severity: grave
Tags: security
Justification: user security hole
Hi
A path security vulnerability was reported upstream for
libmojolicious-perl.
[1] https://github.com/kraih/mojo/issues/114
[2] http://cpansearch.perl.org/src/KRAIH/Mojolicious-1.16/Changes
[3] http://perlninja.posterous.com/sharks-in-the-water
Bests
Salvatore
-- System Information:
Debian Release: wheezy/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Source: libmojolicious-perl
Source-Version: 1.16-1
We believe that the bug you reported is fixed in the latest version of
libmojolicious-perl, which is due to be installed in the Debian FTP archive:
libmojolicious-perl_1.16-1.debian.tar.gz
to main/libm/libmojolicious-perl/libmojolicious-perl_1.16-1.debian.tar.gz
libmojolicious-perl_1.16-1.dsc
to main/libm/libmojolicious-perl/libmojolicious-perl_1.16-1.dsc
libmojolicious-perl_1.16-1_all.deb
to main/libm/libmojolicious-perl/libmojolicious-perl_1.16-1_all.deb
libmojolicious-perl_1.16.orig.tar.gz
to main/libm/libmojolicious-perl/libmojolicious-perl_1.16.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 622...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <car...@debian.org> (supplier of updated
libmojolicious-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 16 Apr 2011 08:19:53 +0200
Source: libmojolicious-perl
Binary: libmojolicious-perl
Architecture: source all
Version: 1.16-1
Distribution: unstable
Urgency: high
Maintainer: Debian Perl Group <pkg-perl-maintain...@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Description:
libmojolicious-perl - simple, yet powerful, Web Application Framework
Closes: 622952
Changes:
libmojolicious-perl (1.16-1) unstable; urgency=high
.
* Team upload.
* New upstream release.
+ Fix path security vulnerablility (Closes: #622952).
* Bump Standards-Version to 3.9.2.
Checksums-Sha1:
746e1bb3a8dda75c0593810444a693c31eab3422 2064 libmojolicious-perl_1.16-1.dsc
6ee34f7efff0ce66d5596392ef847098f5c1954c 465177
libmojolicious-perl_1.16.orig.tar.gz
bd7035c8e769ba74877244f7cdc5e0ac23567a61 12983
libmojolicious-perl_1.16-1.debian.tar.gz
dc6d6e56c5776bb0df4fcc2604e0e0760142d4d7 691700
libmojolicious-perl_1.16-1_all.deb
Checksums-Sha256:
d2f196a9521fbda0e54c947c29497566b06087a569eae2afd9537b36ffc6224b 2064
libmojolicious-perl_1.16-1.dsc
fbc9ab857fd89a99ae1b19c626659039183894f2b57c92fb89e6eb0c40739790 465177
libmojolicious-perl_1.16.orig.tar.gz
26f6ed366dfed0a2655dc5bd00b1d0707f7ec969b35b5e584deb33af232235cd 12983
libmojolicious-perl_1.16-1.debian.tar.gz
9ab946888b60601044bc5f6e5c2c9d75db775922e19c37f44769366bad173c7a 691700
libmojolicious-perl_1.16-1_all.deb
Files:
ad29f280b7b9e19cce37d27a2a7cf7ee 2064 perl optional
libmojolicious-perl_1.16-1.dsc
280f9eaeb6e90f1c5d565ba8146d3698 465177 perl optional
libmojolicious-perl_1.16.orig.tar.gz
114ac3e4587e7c1bd56a9edcbb840375 12983 perl optional
libmojolicious-perl_1.16-1.debian.tar.gz
9b5557776dce2dcf551cc75f89ebe4dc 691700 perl optional
libmojolicious-perl_1.16-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQIcBAEBCAAGBQJNqThxAAoJEHidbwV/2GP+1JgQAM8lNR//vuFvdKtPJdEwiwOX
cNihg04sdn+2gtM2pt4GpBCdW8NXPJsUUZ9hV24kNUWyoCMcieIJq+g3T8XH57RW
CPwDXI7/R7B+UKyQAgHB5EDlHOsB67PuhEsE4WNHoU3YTuopvviPQHncX5xk/2i1
LHzMIFkyidO0hJpNSle8PA2ulN86P9rBM229Vyr5i4fB9Zqan9J+Vj8e/tluu3A6
YPYoEXJ0RWxaSd7NqKMB5Dt7TWLubWJBHQvvMayu/xqSERXVvf/jG3GTlDS2ieKJ
6C0IHRK8qskMhSMOa/XMTgSyWWTI5oRCmfSggdpEHS1LFwiW9kUQZ7z6GFNnBL9f
D58iJKijrNmCMbUFuneAoH1FLDqwYOKbfkM98yme8KWfA3+WZ0l41iXUtuHqB5vn
bk+lQQNss2W2goQ6TCATeUVA9vOJKppBZW6KgcMAs21iKjNETL6hxlTaGgE5Xvzw
sYkv2x30o3WsYg1cDzwJBVJ1BXe92bgRNpftbjFhviXubiOvWUYSvYMWiqGhPtBk
QM5vTkbOYkKu7p/dq9GS5vdrb5/7TqVb2FV0tXqeD8MeADdYzuqDeYLWHmdfvxy1
24iUYnM6ixc7oJR4+WvxLw9q60jq+kOXo9NS3+ngHYQ6Ebfcnneydvs1jYDvJ2fo
2A5d7d9BMLfa5hXFphW4
=dOfl
-----END PGP SIGNATURE-----
--- End Message ---
