Your message dated Fri, 29 Aug 2014 04:17:45 +0000 with message-id <e1xnddb-00086o...@franck.debian.org> and subject line Bug#741678: fixed in live-config 3.0.23-1+deb7u1 has caused the Debian Bug report #741678, regarding It is possible to use live user account to log in via SSH to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 741678: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741678 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: live-config Version: 4.0~alpha31-1 Severity: important Tags: security By default, live-config creates a user with known name (user) and password (live). In live images with included openssh-server, this means that anyone can log into a live system immediately once it connects to a network (which it tries to do during boot).
--- End Message ---
--- Begin Message ---Source: live-config Source-Version: 3.0.23-1+deb7u1 We believe that the bug you reported is fixed in the latest version of live-config, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 741...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Luciano Bello <luci...@debian.org> (supplier of updated live-config package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 26 Aug 2014 00:44:04 +0200 Source: live-config Binary: live-config live-config-doc live-config-systemd live-config-sysvinit live-config-upstart Architecture: source all Version: 3.0.23-1+deb7u1 Distribution: wheezy-proposed-updates Urgency: medium Maintainer: Debian Live Project <debian-live@lists.debian.org> Changed-By: Luciano Bello <luci...@debian.org> Description: live-config - Live System Configuration Scripts live-config-doc - Live System Configuration Scripts (documentation) live-config-systemd - Live System Configuration Scripts (systemd backend) live-config-sysvinit - Live System Configuration Scripts (sysvinit backend) live-config-upstart - Live System Configuration Scripts (upstart backend) Closes: 741678 Changes: live-config (3.0.23-1+deb7u1) wheezy-proposed-updates; urgency=medium . * Non-maintainer upload. * Disabling ssh password authentication by default (Closes: #741678). This fix is from: http://live.debian.net/gitweb/?p=live-config.git; a=commitdiff;h=e776761a3cff82912e4e1edecaa894dfe52ffb61 Checksums-Sha1: 4024fd5a7b972f4effe227669e83e66e03fdee0f 2215 live-config_3.0.23-1+deb7u1.dsc d0306f4d12c9405f611617bb4a54b5f5c2ceea9f 14144 live-config_3.0.23-1+deb7u1.debian.tar.xz 29d73be7f382a4e1cd4ee45605561890b6c6c7db 27484 live-config_3.0.23-1+deb7u1_all.deb 5ca74581b427f4c795c958ae9d3e3213c8fbebc3 51102 live-config-doc_3.0.23-1+deb7u1_all.deb 5e90b80b5fc0ad5c88abfb68df641f4e2c49580a 14978 live-config-systemd_3.0.23-1+deb7u1_all.deb 3b892a1e8dc8c9853243aed8932cc56afbfa4bc0 16140 live-config-sysvinit_3.0.23-1+deb7u1_all.deb a680654841ee1e271c8afb32e1656d77962a840d 15764 live-config-upstart_3.0.23-1+deb7u1_all.deb Checksums-Sha256: cd72d5b481446880d618423bf8f4bb360e2db9e4023881e50a9365cb3860398d 2215 live-config_3.0.23-1+deb7u1.dsc 00cdf161cdcdb46468deb9fae088934cefaa9da174642a117b7c28e6cefe7bef 14144 live-config_3.0.23-1+deb7u1.debian.tar.xz 847914835706ebab195a94db42ca10751731ba00125ddb9b0e3bafef77bbfaa9 27484 live-config_3.0.23-1+deb7u1_all.deb fb376f79fb6ad06807ce16c11fadc30a3a2ff8cfabe903504fecc3dd4e34e3ca 51102 live-config-doc_3.0.23-1+deb7u1_all.deb bb17ba70772ea6d0bf50989dced11cb8fc13d5e192977dfe30bdf71b92789015 14978 live-config-systemd_3.0.23-1+deb7u1_all.deb a88dfe011eecacb27ba3e3c5f753db6211e728cd27f9088e3a4f4a5bae44e8bf 16140 live-config-sysvinit_3.0.23-1+deb7u1_all.deb 4f5dcccc55c78ea468df4173ed28e26f52c1edddbf26e6e5963c46ac486b2c82 15764 live-config-upstart_3.0.23-1+deb7u1_all.deb Files: 7cca62e883c4cf16dd32aec55206b2b1 2215 misc optional live-config_3.0.23-1+deb7u1.dsc ba36f01d0770316d65c8592f8f8007d4 14144 misc optional live-config_3.0.23-1+deb7u1.debian.tar.xz bc188a95a4170ff7de30f5340436a82e 27484 misc optional live-config_3.0.23-1+deb7u1_all.deb 8991e19979a5da4d2ba5cb84d3fbc80a 51102 doc optional live-config-doc_3.0.23-1+deb7u1_all.deb d1b7589c05a066d1d64cf0c59065e333 14978 misc optional live-config-systemd_3.0.23-1+deb7u1_all.deb cce74130ea5aef0946fa1722a9bc5638 16140 misc optional live-config-sysvinit_3.0.23-1+deb7u1_all.deb 286265e87ac367f6e50692b82303fdf2 15764 misc optional live-config-upstart_3.0.23-1+deb7u1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJT/Q34AAoJEG7C3vaP/jd0HFoP/2nNmhkv3R4mRrDFBpxYls6w Dan2UCRcKwDrdjj1nc5oTsiQBlw7KZ88QVqM4lT+CR6T0xI458XgHLdLhQGiwCDl Bp5hnQycObXaiuhg5ecDZ7bby6LqlZms0YV+9hADRIVDYpZzm5Uu1paTglbt2RTY SNfMboIJF9slQNlSLdJPwuz5+AyQ6rYgjTGyQmHruhDV0UU2AL+ZWq5i/1wBIsUd 7bXtQEZxDc90CUupTOmABTEyOHJXpZq6esX7g0pDC8W6W9Ub4JyETP5B6eDLAPz+ 3fSwmGXPN82stGWKkTeWzjCMfa9oi3s1CMI24r3GrIEUgN9ur7/CHmsWNQ7FFcgN OroW+e/4Q/JySx1m18Tq8tQQtMCEAX8ycZm/nOOxaci157AOLJVa2psVMKxOFtxk p44Yqp6sbGkMHFC64KH0WU25BJMovAbOsG8FjYvaQiG78f4aRDMtMQdLhigqANdx YXN5u/FLNGA58xoKaetVlhYzZlwbhuE5FJ25utyUYb3/lZv4C8y+1wlv4pNNjKqD 7Loy8zl1x3SrSDj2isvZ/ZMmKMrqvgOBu6/x75mmJ5tZtk/buuY7d90Or8U3eXJx 449vv3Pu64PYIz0eXovXXxx2HWaOHqaLOzEtP/BgzzMMz+l3mALPsUniekvoJWCM XIcE+35oJr6mt+QLK60C =m3rF -----END PGP SIGNATURE-----
--- End Message ---
