Your message dated Mon, 03 Dec 2012 09:32:48 +0000 with message-id <e1tfsoo-00072m...@franck.debian.org> and subject line Bug#694641: fixed in icinga-web 1.7.1+dfsg2-6 has caused the Debian Bug report #694641, regarding yui: CVE-2012-5475 - YUI 2.x security issue regarding embedded SWF files to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 694641: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694641 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: yui Severity: grave Tags: security Justification: user security hole Hi, please see : http://www.yuiblog.com/blog/2012/10/30/security-announcement-swf-vulnerability- in-yui-2/ Are vulnerable versions in Debian? Cheers, luciano
--- End Message ---
--- Begin Message ---Source: icinga-web Source-Version: 1.7.1+dfsg2-6 We believe that the bug you reported is fixed in the latest version of icinga-web, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 694...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Markus Frosch <mar...@lazyfrosch.de> (supplier of updated icinga-web package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 29 Nov 2012 00:17:41 +0100 Source: icinga-web Binary: icinga-web icinga-web-pnp Architecture: source all Version: 1.7.1+dfsg2-6 Distribution: unstable Urgency: high Maintainer: Debian Nagios Maintainer Group <pkg-nagios-de...@lists.alioth.debian.org> Changed-By: Markus Frosch <mar...@lazyfrosch.de> Description: icinga-web - host and network monitoring system - modern web interface icinga-web-pnp - host and network monitoring system - PNP4Nagios web plugin Closes: 694262 694641 Changes: icinga-web (1.7.1+dfsg2-6) unstable; urgency=high . * [bb01a46] Security fix for a YUI library issue . Two .swf files has been removed from the Debian package and the Flash supported chart feature is disable for now. . In addition a upstream patch was applied to allow the user to use the feature with a newer .swf resource if he wants to. . Please see README.Debian for instructions . Closes: #694262 Closes: #694641 . * [4ec39a9] DFSG cleaned upstream 1.7.1+dfsg2 SWF binary files has been removed from tarball Checksums-Sha1: cafa23da26bc3a4e39a1d89148b8849242e10c06 1501 icinga-web_1.7.1+dfsg2-6.dsc 8d8ed25250d8e8ee295153481ce882ff3f33621b 14251448 icinga-web_1.7.1+dfsg2.orig.tar.gz d25a46b02c067afcf6acd96d5bf24e8641d6fc18 27303 icinga-web_1.7.1+dfsg2-6.debian.tar.gz 8e41b12e35098dd1b1d3222d3b5acab1f912d51a 7350508 icinga-web_1.7.1+dfsg2-6_all.deb 50963fe2411b3e8e2fc0ddf502bbc16d9ebf09d8 17216 icinga-web-pnp_1.7.1+dfsg2-6_all.deb Checksums-Sha256: 9b8e099d7f2e425b5837e964eeb5befddffa45eeb0856c1398b678ed54f373ba 1501 icinga-web_1.7.1+dfsg2-6.dsc dbd4db369d37f59bb8738604b5440cac3b04c9b40d02ec4faea668e8513018f4 14251448 icinga-web_1.7.1+dfsg2.orig.tar.gz 8f7c88e0422d6202628834d42f2ecf877ebc98516aa89f94265d6093c7988e65 27303 icinga-web_1.7.1+dfsg2-6.debian.tar.gz d28ef11c7e13bd797629ad8d08a7e74f4adc081e77e25af8749924b824f3862a 7350508 icinga-web_1.7.1+dfsg2-6_all.deb 7e922548dbacc05c7c8d181c9e3d8bc83904686b4da92eca21dfda7b157a2e5c 17216 icinga-web-pnp_1.7.1+dfsg2-6_all.deb Files: 95c176754abc5278124f28915d3eaad2 1501 php extra icinga-web_1.7.1+dfsg2-6.dsc 6d1e7079c1fdef8417e518789b03686a 14251448 php extra icinga-web_1.7.1+dfsg2.orig.tar.gz 5d42c0eeb5f8a8d4ea3cb47356125a19 27303 php extra icinga-web_1.7.1+dfsg2-6.debian.tar.gz 0419c24a48e8d0dbfaf3890d707baf25 7350508 php extra icinga-web_1.7.1+dfsg2-6_all.deb 176485c958ce3c262f67a8fe68595fc9 17216 php extra icinga-web-pnp_1.7.1+dfsg2-6_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlC8bEQACgkQ01u8mbx9AgoLWgCfSh9y/BCthqxnRyMT8UVqIyAo KQ8An3+eC3iQSOWLomNDhWaclvUF20un =jsnS -----END PGP SIGNATURE-----
--- End Message ---
