Your message dated Thu, 27 Feb 2020 04:13:39 +0000 with message-id <e1j7ayn-0005h1...@fasolo.debian.org> and subject line Bug#952551: Removed package(s) from unstable has caused the Debian Bug report #736077, regarding dont leak private network information (at least not by default) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 736077: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736077 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---package: libjs-jssip tags: security Hi Daniel, thanks for working on usuable + secure RTC in the webbrowser! During your presentation at the Paris mini-debconf I just learned that your libjs-jssip leaks all networks to the sip server (or calling party), which I consider a privacy violation (which has been implemented to improve the user experience by allowing the application to choose the best network connection). Still, if I connect via route $X I expect this software not to leak my other routes, which might contaín sensitive information. In the talk you said it was trivial to comment out these lines, so I'm asking you to do this by default and optionally allow it. cheers, Holger
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
--- Begin Message ---Version: 0.6.34-5+rm Dear submitter, as the package jssip has just been removed from the Debian archive unstable we hereby close the associated bug reports. We are sorry that we couldn't deal with your issue properly. For details on the removal, please see https://bugs.debian.org/952551 The version of this package that was in Debian prior to this removal can still be found using http://snapshot.debian.org/. Please note that the changes have been done on the master archive and will not propagate to any mirrors until the next dinstall run at the earliest. This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org. Debian distribution maintenance software pp. Sean Whitton (the ftpmaster behind the curtain)
--- End Message ---
-- Pkg-javascript-devel mailing list Pkg-javascript-devel@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
