Your message dated Wed, 16 Aug 2023 15:40:58 +0000
with message-id <e1qwidm-00fasb...@fasolo.debian.org>
and subject line Bug#1049887: fixed in xfaces 3.3-29.1
has caused the Debian Bug report #1049887,
regarding xfaces: possible real-world data leak in alla.db
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1049887: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1049887
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: xfaces
Version: 3.3-3
Severity: serious
Tags: security
X-Debbugs-Cc: secur...@debian.org
This source package contains a file alla.db with names and email
addresses that appear to be real-world data. It is not used by the
program or tests, so I assume it slipped in. I am going to remove it
with a NMU and am copying the Security Team. Maybe Debian should do
something about it (informing the people).
--- End Message ---
--- Begin Message ---
Source: xfaces
Source-Version: 3.3-29.1
Done: Bastian Germann <b...@debian.org>
We believe that the bug you reported is fixed in the latest version of
xfaces, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1049...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bastian Germann <b...@debian.org> (supplier of updated xfaces package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 16 Aug 2023 13:48:53 +0000
Source: xfaces
Architecture: source
Version: 3.3-29.1
Distribution: unstable
Urgency: medium
Maintainer: Hakan Ardo <ha...@debian.org>
Changed-By: Bastian Germann <b...@debian.org>
Closes: 1007600 1049887
Changes:
xfaces (3.3-29.1) unstable; urgency=medium
.
* Non-maintainer upload
* Convert to source format 3.0 (closes: #1007600)
* Drop suspicious 1 and alla.db files (closes: #1049887)
Checksums-Sha1:
3279069317ef19b6ee3c83bd6ed0c774b6688339 1610 xfaces_3.3-29.1.dsc
0a1dcef3313cce22ac001f40b00f0c235a308e38 10628 xfaces_3.3-29.1.debian.tar.xz
29ced20352366b9d2591c8d1c6a0461df62d68ac 6386 xfaces_3.3-29.1_source.buildinfo
Checksums-Sha256:
a33822a5d07f532bd0f825e3f3b5d354c5b0b776bb15f3794e29c0a3b401c5a3 1610
xfaces_3.3-29.1.dsc
159658a53af19461836129029f3d1500d30b7d3cadf25af0e2ba257bad499702 10628
xfaces_3.3-29.1.debian.tar.xz
f9daeb402122caacc21220f40d1f47ab962e5961ded80a6709e42509ed08fa69 6386
xfaces_3.3-29.1_source.buildinfo
Files:
6cb874a39be4def19b34315dc186dc2a 1610 mail optional xfaces_3.3-29.1.dsc
13e8b556914f7d12dd2b3b61cecaf8ab 10628 mail optional
xfaces_3.3-29.1.debian.tar.xz
b8f7ab46bcf2b5114969a26b0a53fcba 6386 mail optional
xfaces_3.3-29.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=hUr2
-----END PGP SIGNATURE-----
--- End Message ---
