Your message dated Wed, 03 Oct 2012 17:17:38 +0000 with message-id <e1tjszm-0006g5...@franck.debian.org> and subject line Bug#688942: fixed in 389-ds-base 1.2.11.15-1 has caused the Debian Bug report #688942, regarding 389-ds-base: CVE-2012-4450 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 688942: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688942 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: 389-ds-base Severity: grave Tags: security Justification: user security hole This was assigned CVE-2012-4450: https://fedorahosted.org/389/ticket/340 Patch: http://git.fedorahosted.org/cgit/389/ds.git/commit/?id=5beb93d42efb807838c09c5fab898876876f8d09 Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: 389-ds-base Source-Version: 1.2.11.15-1 We believe that the bug you reported is fixed in the latest version of 389-ds-base, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 688...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Timo Aaltonen <tjaal...@ubuntu.com> (supplier of updated 389-ds-base package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 03 Oct 2012 19:33:52 +0300 Source: 389-ds-base Binary: 389-ds 389-ds-base-libs 389-ds-base-libs-dbg 389-ds-base-dev 389-ds-base 389-ds-base-dbg Architecture: source all amd64 Version: 1.2.11.15-1 Distribution: unstable Urgency: low Maintainer: Debian 389ds Team <pkg-fedora-ds-maintain...@lists.alioth.debian.org> Changed-By: Timo Aaltonen <tjaal...@ubuntu.com> Description: 389-ds - 389 Directory Server suite - metapackage 389-ds-base - 389 Directory Server suite - server 389-ds-base-dbg - 389 Directory Server suite - server debugging symbols 389-ds-base-dev - 389 Directory Server suite - development files 389-ds-base-libs - 389 Directory Server suite - libraries 389-ds-base-libs-dbg - 389 Directory Server suite - library debugging symbols Closes: 688942 689389 Changes: 389-ds-base (1.2.11.15-1) unstable; urgency=low . * New upstream release. * Add fix-cve-2012-4450.diff. (Closes: #688942) * dirsrv.init: Fix stop() to remove the pidfile only when the process is finished. (Closes: #689389) * copyright: Update the source url. * control: Drop quilt from build-depends, since using 3.0 (quilt) * lintian-overrides: Add an override for hardening-no-fortify- functions, since it's a false positive in this case. * control: Drop dpkg-dev from build-depends, no need to specify it directly. * copyright: Add myself as a copyright holder for debian/*. * 389-ds-base.prerm: Add 'set -e'. * rules: drop DEB_HOST_MULTIARCH, dh9 handles it. Checksums-Sha1: 287c04fa230ce10683e05c35a33281593cd38b7e 2538 389-ds-base_1.2.11.15-1.dsc 1d34456b520240eff3e40679802e7c2347078e37 2983709 389-ds-base_1.2.11.15.orig.tar.bz2 3a07b308ee790f938e7a114034ec96dfa78d5b76 22481 389-ds-base_1.2.11.15-1.debian.tar.gz 91a17bea4e12bef8ba7682ecd7b8d0030bea9a41 15308 389-ds_1.2.11.15-1_all.deb e409a597b83d894d73cc787df2212f71c30f713d 430514 389-ds-base-libs_1.2.11.15-1_amd64.deb 2fc42e90ca4144156945d53d7a5ebd5cbf263442 1314264 389-ds-base-libs-dbg_1.2.11.15-1_amd64.deb 7f6b464f71258ad32fb07fb1d83fa147f7b65bec 73916 389-ds-base-dev_1.2.11.15-1_amd64.deb 7c10f39969491da5b1c6344c8e144a5dc26ed189 1740264 389-ds-base_1.2.11.15-1_amd64.deb 24d4253bba4438ba23a0ac0482f7d907a93c4db6 4416754 389-ds-base-dbg_1.2.11.15-1_amd64.deb Checksums-Sha256: afb770489b9e3d3b37e68df281f914cad7ba243088055f2b26f126a635bf2642 2538 389-ds-base_1.2.11.15-1.dsc de193bf5e38e1c7e1b9af0e1eebab70c8b62c2b0daeaa0a33e737add90bcbce0 2983709 389-ds-base_1.2.11.15.orig.tar.bz2 06316ced7855884d4c3c170441ceb3bd1590b2d9eb0ab2e942d66e50cade13b6 22481 389-ds-base_1.2.11.15-1.debian.tar.gz 21a515edea0904cb09b09615bfce185b9c3d2530697402a556fb4424caed7189 15308 389-ds_1.2.11.15-1_all.deb 4921580b288e175aefc603f448142b4addb154d129d2443b0e9655e7e69862a3 430514 389-ds-base-libs_1.2.11.15-1_amd64.deb ee7a8ec438ffbbbb2213255f1f7fe3f82875dd193080ae16a46588cb5fc6a4cc 1314264 389-ds-base-libs-dbg_1.2.11.15-1_amd64.deb b4f8baaf12b7157982a4194a71824882bc0a0521388c28d5012f0570687cc58e 73916 389-ds-base-dev_1.2.11.15-1_amd64.deb 2dcbc07aa4b797dd664ff58df24619edf6b236517e3e3bb25df4f0a920bad3ee 1740264 389-ds-base_1.2.11.15-1_amd64.deb b844cb5b2fa167efcaf8a24e5ca7bc9521db2239efe0f50cff1f68ad0646b17b 4416754 389-ds-base-dbg_1.2.11.15-1_amd64.deb Files: eca46b8dff49b3d258548d813b20d7ed 2538 net optional 389-ds-base_1.2.11.15-1.dsc ae6bc25834728bcd9dd96ef82094c2bd 2983709 net optional 389-ds-base_1.2.11.15.orig.tar.bz2 ac0e39c9465066ec41d66fa3dbd0bd79 22481 net optional 389-ds-base_1.2.11.15-1.debian.tar.gz d97b3c62e3e7db528639507b6a6b9c7b 15308 net optional 389-ds_1.2.11.15-1_all.deb ef2dcc54c1f3e45dfa2cf92f26b0276d 430514 libs optional 389-ds-base-libs_1.2.11.15-1_amd64.deb f82f70138ace3d35a12595917b8438d8 1314264 debug extra 389-ds-base-libs-dbg_1.2.11.15-1_amd64.deb 93f8227f67aa88871eee14983a08024e 73916 libdevel optional 389-ds-base-dev_1.2.11.15-1_amd64.deb efaec22f681d2670bf8abdde31742e3b 1740264 net optional 389-ds-base_1.2.11.15-1_amd64.deb 3b538bfe27ef4507e180154a5f91f956 4416754 debug extra 389-ds-base-dbg_1.2.11.15-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJQbHH8AAoJENADhS+9UlKe5+UP/3RNCnVe7xST27oWb73GFIBB FQ56frWdDXsDK8xvr4HHgkS/o57Ynt5yZLCcl/WMsaxDTTMCjOWeaEHw49cggYTS v4zHoHCJr2EYmNgrohgjVJ8WtsOXcCl/PhbDuu4RaHE0E6msX9SZ3wpUyGDiUCu5 OGGjdue2+pfBfyH/pCvxbuKTgmiRybGJ4OqMcg7UeF8al1vKCAfX2faC5AyIbqV3 ezbvl4BpPG1GMMExggy5OYi5f+baVH7ui4TCSjyEE9hPURcis5YExaOvNSPKBQ7p XBlSyFQN//isuVPtmYYz9HnE13z0mOmvKOrO2l3H/DEj/B7O3ok1keUKCGatX8E2 D+IN38lWGFWLXR9NdAW1oYip2dKa/dCHMok+vqVn15e06bYU6IPzE0vTVCQIoz9D AcipbpjXtqjy3/EbsFJJybw9ogS/9/E5eCp0CUTXWCT4HrIrkGt7YVWEOKzFbpfb Qp9ejNufWIr1o76Ve69e9NRSFLIJlzHw1RUEAuKoNj1n+o67+M9nLidVZgujNtVG xRi7vG2BxihIxX9DGB6WpQA9yyG4pHY4ggxaezTzpro3cbGUNnO3J9t04ZS71KA+ JAF0+ZJGoT2q+Ocoa6ElxTFRn42W1nVmflwo9GC99VEHMHWQCLCnnWjSGDFipqy6 V2mrfAuzB9EBCDYETEUE =Cyvz -----END PGP SIGNATURE-----
--- End Message ---
