Your message dated Wed, 19 Dec 2012 21:17:33 +0000
with message-id <[email protected]>
and subject line Bug#493599: fixed in udns 0.2-1
has caused the Debian Bug report #493599,
regarding Transaction ID and Source Port not random enough
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
493599: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=493599
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Package: udns
Subject: udns: Transaction ID and Source Port not random enough
Version: 0.0.9-2
Severity: grave
Tags: security
Consecutive queries use the same initial fixed random port and
consecutive transaction IDs. This allow exploits using spoofing, as
described in CVE-2008-1447, related to bind and others.
- - - -- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.26 (PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkiVw9MACgkQyTpryRcqtS0pYQCcDee7Sb4lk/Q+EPnlbh6ZE6eR
qAUAoIK5L3GexOc5NUXGHhmrsDjge9Nn
=8APJ
-----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---
Source: udns
Source-Version: 0.2-1
We believe that the bug you reported is fixed in the latest version of
udns, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <[email protected]> (supplier of updated udns package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 19 Dec 2012 22:43:15 +0400
Source: udns
Binary: libudns0 libudns-dev udns-utils
Architecture: source i386
Version: 0.2-1
Distribution: unstable
Urgency: low
Maintainer: Michael Tokarev <[email protected]>
Changed-By: Michael Tokarev <[email protected]>
Description:
libudns-dev - async-capable DNS stub resolver library, development files
libudns0 - async-capable DNS stub resolver library
udns-utils - Several DNS-related utilities built on top of udns library
Closes: 493599
Changes:
udns (0.2-1) unstable; urgency=low
.
* new upstream version (Closes: #493599)
* new maintainer, which is, part-time upstream author.
Thank you Thadeu Lima for the previous work!
* removed debian/README which explained that the software is under
development with non-stabilized API
* revisited all debian stuff: simplified debian/rules a bit,
reviewed standards-version and debhelper compat rules,
made the library multiarch.
Checksums-Sha1:
b3eea31e06df12b68a477e7d4e1f6576809ec0c9 1252 udns_0.2-1.dsc
416da8c95283eae45f6d2e6fb055c4ef765a3f02 87308 udns_0.2.orig.tar.gz
db4c86b09106e859823a3455b8232261aac35bba 4912 udns_0.2-1.debian.tar.gz
2342a1d453a38940e937ec826309b6603af17c3f 28072 libudns0_0.2-1_i386.deb
1b7e2c3efb084c0812001e24f50843cabb15bed1 59404 libudns-dev_0.2-1_i386.deb
39adf42d42f15555f86a8b773d17c550923b9c4d 24514 udns-utils_0.2-1_i386.deb
Checksums-Sha256:
2d5df654ad03de72d31db30634e47b8a6050411e358a7aafe6bc74bc8c9db767 1252
udns_0.2-1.dsc
558c7d7acc358e13f91f73ba7fef0ed094010716a8dcee286eef05d0ff264224 87308
udns_0.2.orig.tar.gz
41bbfe9652571a7810d6f660dafd49dca9a0b5824a3606662eb598fa203023ae 4912
udns_0.2-1.debian.tar.gz
bff855f46f8891a340d8b6031d240124ed5554d407309d0bf94e663d6d929a37 28072
libudns0_0.2-1_i386.deb
1dfc91f7c7c75b7987c1af01abf8bfef1d56c53f5e92a5d3b7b15bbf60cb8767 59404
libudns-dev_0.2-1_i386.deb
94a21845bb6395b9b219869aa7027996fd9feb831c89f3fa5c1df4dfc541369e 24514
udns-utils_0.2-1_i386.deb
Files:
0299bf301d7865a62a3e8a58837bd079 1252 net optional udns_0.2-1.dsc
3fdaaef5e0f2ad71624959add1b77995 87308 net optional udns_0.2.orig.tar.gz
2f1917c0cf434d2147bc13ae8e43bfbb 4912 net optional udns_0.2-1.debian.tar.gz
00c43e12e99c3d5fa2b3e8fdce45fc8f 28072 libs optional libudns0_0.2-1_i386.deb
9a440395af6a5e87288b3e2a34535db5 59404 libdevel optional
libudns-dev_0.2-1_i386.deb
5796469739e8122eff89dcc6873a2c87 24514 net optional udns-utils_0.2-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iJwEAQECAAYFAlDSLJoACgkQUlPFrXTwyDhOqwQA2KdTtQ7mGOxNzCkIiixnuRr2
Jc5cY6MubFqt1mBc4DpQVJvXj2WapMTsTFjldXGuHpLJ1TszHwziAlBQKpEFwbnk
AdDv+kw7AndCduimLVCdsGG2xMTb6SEgtbbReUGPpnKJxExfCilnxh0th5UVmYit
heeeyL3GCK0MAIl9IWE=
=HzVZ
-----END PGP SIGNATURE-----
--- End Message ---
