Your message dated Sat, 12 Oct 2013 21:17:06 +0000 with message-id <e1vv6yc-00019t...@franck.debian.org> and subject line Bug#723714: fixed in rtkit 0.10-2+wheezy1 has caused the Debian Bug report #723714, regarding rtkit: CVE-2013-4326 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 723714: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=723714 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: rtkit Severity: grave Tags: security Justification: user security hole Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4326 for details and a patch. Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: rtkit Source-Version: 0.10-2+wheezy1 We believe that the bug you reported is fixed in the latest version of rtkit, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 723...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Alessio Treglia <ales...@debian.org> (supplier of updated rtkit package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 08 Oct 2013 09:41:41 +0100 Source: rtkit Binary: rtkit Architecture: source amd64 Version: 0.10-2+wheezy1 Distribution: stable Urgency: high Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org> Changed-By: Alessio Treglia <ales...@debian.org> Description: rtkit - Realtime Policy and Watchdog Daemon Closes: 723714 Changes: rtkit (0.10-2+wheezy1) stable; urgency=high . * Fix CVE-2013-4326: - pass uid of caller to polkit, otherwise we force polkit to look up the uid itself in /proc, which is racy if they execve() a setuid binary (Closes: #723714) Checksums-Sha1: b282e8f712435e4e8f5f7d4afc606b4f37a74794 2027 rtkit_0.10-2+wheezy1.dsc 4a8d6194e5de5629323f156d4a96b93898980b22 4714 rtkit_0.10-2+wheezy1.debian.tar.gz 2ae45d7ae2cf04484cadfe50cba6f70938f775ad 36870 rtkit_0.10-2+wheezy1_amd64.deb Checksums-Sha256: ce5c81c99cac9353adf25bed85508709e93c08bbd3b17f40bf94d76a40356001 2027 rtkit_0.10-2+wheezy1.dsc ffafcb5a59362c75e20263d3e51e4f8ca5bdc7cf4b92a786897db36165125068 4714 rtkit_0.10-2+wheezy1.debian.tar.gz 42d6fb0e1581f683cbfe345dc836ed09c885747aa930266d4d34d943102a39e0 36870 rtkit_0.10-2+wheezy1_amd64.deb Files: 46e4c5275011b9b2376c45b879367f06 2027 admin optional rtkit_0.10-2+wheezy1.dsc 3554336627be63f870c41070a96554ad 4714 admin optional rtkit_0.10-2+wheezy1.debian.tar.gz 92716b66b795d5ccba758ba577abfca2 36870 admin optional rtkit_0.10-2+wheezy1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJSU8aoAAoJEOikiuUxHXZaLRsP/2thtLHgx1+/qT2UXXhSbwkN dX/D6qakq4RfQIMSuXQkjcvtAdc3pEM+kfZZHV7MXR5ceHVf0o9WjBMe3UiJdfgq 8UjIicFpOJKlhMhjyABrhIgiANeBNsh/JxCKRwtQjqOsJ8grsLK8wrfRSMOz7uhm XemtsitJgIydi6qtvP4LvyzYpLhAb/NkT+vJeGd5I3ozkqE7HpL+NkyRlBDNhXTt pGwACI8/OBq9lXqmZpPdhp9iQkilrJXVVodDQbt+1cGO9LAEu0u2Kb++M0zpDEuj BipgSC+rYIc8K7/pd13rZg3vkMMRfB1Z+I4H/OzMK98KZTySAi9rxELP0DJW5+en 1TV9kinIOK4EQV9j36BBQ/rATfBMBQagc8aNLg4uNh5trCUv/zUFCi7qwL0PaTEc YJNZ8CTb+vpsosE4uZcoNthogHQS5+YAi8w2GYcddAjDaT/U5DIC+bF1CJ2PbDVO xiq4fsnzRHbdS8+MctBRnWAu2zqoQUGPTCBMhQh8pMkFCY1EdwnAKBRfFGXaeb3+ Yp8iC8cgRcpzrzaT6EZbjYwc2FDvGvSpe79UZqFXFmhJylELXblU3ku7zFZBPHu2 WPFVeSa6NC31Mmgv7g+d3B5jaQFCqS3qy1kNy0wD9ilYSsc/Uc6TqaQ9uQzrjyVV 0qzDunFmci9JbETgtQZu =e3Cq -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
