Your message dated Sun, 16 Jul 2017 21:17:08 +0000
with message-id <[email protected]>
and subject line Bug#864664: fixed in libquicktime 2:1.2.4-10+deb9u1
has caused the Debian Bug report #864664,
regarding CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126
CVE-2017-9127 CVE-2017-9128
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
864664: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864664
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libquicktime
Severity: grave
Tags: security
Please see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9122
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9123
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9124
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9125
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9126
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9127
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9128
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: libquicktime
Source-Version: 2:1.2.4-10+deb9u1
We believe that the bug you reported is fixed in the latest version of
libquicktime, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Moritz Mühlenhoff <[email protected]> (supplier of updated libquicktime package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 13 Jul 2017 20:29:10 +0200
Source: libquicktime
Binary: libquicktime2 libquicktime-dev libquicktime-doc quicktime-utils
quicktime-x11utils
Architecture: source
Version: 2:1.2.4-10+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Debian Multimedia Maintainers
<[email protected]>
Changed-By: Moritz Mühlenhoff <[email protected]>
Closes: 864664
Description:
libquicktime-dev - library for reading and writing Quicktime files
(development)
libquicktime-doc - library for reading and writing Quicktime files
(documentation)
libquicktime2 - library for reading and writing Quicktime files
quicktime-utils - library for reading and writing Quicktime files (utilities)
quicktime-x11utils - library for reading and writing Quicktime files (x11
utilities)
Changes:
libquicktime (2:1.2.4-10+deb9u1) stretch; urgency=medium
.
* Fix CVE-2017-9122 to CVE-2017-9128, patch from 1.2.4-11 in unstable
(Closes: #864664)
Checksums-Sha1:
bb517402940d37b91e6e102e3a5a928524d38a32 2883 libquicktime_1.2.4-10+deb9u1.dsc
ceae5ac2b461037679f5cd389a09a557b1da9db7 22456
libquicktime_1.2.4-10+deb9u1.debian.tar.xz
Checksums-Sha256:
42646521721a56906f8360a4f9ade4de647049069e641be8ca31b33d665e0fe8 2883
libquicktime_1.2.4-10+deb9u1.dsc
f2508b02ae26aaf6f147374c31b3f23e3557c0e94fbd17553af393e634c3ef71 22456
libquicktime_1.2.4-10+deb9u1.debian.tar.xz
Files:
bba6a44311d4a7bfde18c25720812614 2883 devel optional
libquicktime_1.2.4-10+deb9u1.dsc
817e72bd9ba5e42068d20993d2232aff 22456 devel optional
libquicktime_1.2.4-10+deb9u1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAllrur1fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89E8n0P/R7WAzV6BNkHmT4yI41vrMhZz/T1jdzn
RE+FTWpWnUtf2ZPtm8R2S5lDbOltfM4QLXB/IrVrbx2r1Sn4Iz0tII/jGpGQqYUt
LGigDUEDJ9SbhbZO6/vw/aBPHrI/bQrCifKZESGLJ71jJipH6XT09HXdyy10N/NQ
k2X9xzh19lrsStIXOGIBI0q+ntlk4U7IaDuHFYcJ7WqqHIbZT6vaB/2kTeguSBXv
0/+4SVCvJKMoF8pK2dNgwZPR3dGpwsraLdsuD9ooMekbYukrn1NghDpA7FDLPm+t
36pWEB2oJbaIyy3XEoFVRvoEul2G2O+L5fRqZSmd8JcTJGV3eJ5CAu7xdk/uoQyO
gxMctE0Qp88hY/8etaqtGVDOnaJZM4H8OMKCs1nafXiD30pu0uw0E6n7qJyuoKXU
atiur4ZN6hNa5YAUbT+vloFNaYd1GmSTSbyPV80zoB3sYe+426fiuEyOcER4eFhh
JIaA4XiFu9S5VUjVRVRA52Be+7eXxPCzWuAJc3UbnBrj5K/zTVWu6hnTDpeI9Uz+
VLw1F4ZWSf+ghCzvHghVp2P40kbIp5yK10Dg5JGjfzww7Li0l2WEQ1lLpvvMI5Z0
Y1CmUqa7ggf6ogPdJ7fbzSf7yqLm7B8DfeCVtz0nijh4311CElAgL0IUCLJ9+AJx
3FrBG2qmvvMb
=etDp
-----END PGP SIGNATURE-----
--- End Message ---
