Your message dated Sat, 19 Feb 2005 15:51:23 -0600 with message-id <[EMAIL PROTECTED]> and subject line Bug#295853: reportbug: Well done! has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 18 Feb 2005 15:59:10 +0000 >From [EMAIL PROTECTED] Fri Feb 18 07:59:10 2005 Return-path: <[EMAIL PROTECTED]> Received: from postman2.arcor-online.net (postman.arcor.de) [151.189.20.157] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1D2AX8-00029C-00; Fri, 18 Feb 2005 07:59:10 -0800 Received: from [127.0.0.1] (G1a9b.g.pppool.de [80.185.26.155]) (authenticated bits=0) by postman.arcor.de (8.13.0.PreAlpha4/8.13.0.PreAlpha4) with ESMTP id j1IFx8NM015331; Fri, 18 Feb 2005 16:59:08 +0100 (MET) Message-Id: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Rolf Leggewie <[EMAIL PROTECTED]> To: Debian Bug Tracking System <[EMAIL PROTECTED]> Subject: reportbug includes sensitive information in report X-Mailer: reportbug 3.2 Date: Fri, 18 Feb 2005 15:50:14 +0100 Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-5.5 required=4.0 tests=BAYES_00,BIZ_TLD,HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: Package: reportbug Version: 3.2 Severity: grave Tags: security Justification: user security hole Hi Chris, as a follow-up to 295407 which you managed to fix in a whirl-wind (kudos!), I'd like to say that reportbug still includes sensitive information in a default report against reportbug (see the XXX below). There might be other things it includes from .reportbugrc which are not really meant to be stored in a publicly accessible BTS. Best regards Rolf Leggewie -- Package-specific info: ** /home/leggewie/.reportbugrc: reportbug_version "3.2" mode standard ui text realname "Rolf Leggewie" email "[EMAIL PROTECTED]" smtphost "postman.arcor.de" smtpuser "XXX" smtppasswd "XXX" -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.27-1-586tsc Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages reportbug depends on: ii python2.3 2.3.4-19 An interactive high-level object-o -- no debconf information --------------------------------------- Received: (at 295853-done) by bugs.debian.org; 19 Feb 2005 21:51:25 +0000 >From [EMAIL PROTECTED] Sat Feb 19 13:51:25 2005 Return-path: <[EMAIL PROTECTED]> Received: from rproxy.gmail.com [64.233.170.207] by spohr.debian.org with esmtp (Exim 3.35 1 (Debian)) id 1D2cVY-0006qt-00; Sat, 19 Feb 2005 13:51:24 -0800 Received: by rproxy.gmail.com with SMTP id b11so99876rne for <[EMAIL PROTECTED]>; Sat, 19 Feb 2005 13:51:23 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=Kxwl75fLEfE3ElRchBfdt8MfgzZ4xeJPfLuTEf2aTsMaAuipgocw1MXIKJJd8a5BsZFNzhNBdqU7hOyt3eVh5x2SBXkwU3XdbgTk2nxdWxmrM2qsCFzkxpQTLI2ePJZyxQUWN51WFewfcfzEvGm58b7uj0G8AKKl25ZQC9Z9Png= Received: by 10.38.76.74 with SMTP id y74mr179663rna; Sat, 19 Feb 2005 13:51:23 -0800 (PST) Received: by 10.38.10.67 with HTTP; Sat, 19 Feb 2005 13:51:23 -0800 (PST) Message-ID: <[EMAIL PROTECTED]> Date: Sat, 19 Feb 2005 15:51:23 -0600 From: Chris Lawrence <[EMAIL PROTECTED]> Reply-To: Chris Lawrence <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: Bug#295853: reportbug: Well done! In-Reply-To: <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Status: No, hits=-3.5 required=4.0 tests=BAYES_00,BIZ_TLD, HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02 X-Spam-Level: On Sat, 19 Feb 2005 17:01:29 +0100, Rolf Leggewie <[EMAIL PROTECTED]> wrote: > Chris, good to hear. From the Changelog I got the impression that this > issue still had not been addressed. 3.8 is installed in sarge as of today; closing this report. CNL -- Chris Lawrence - http://blog.lordsutch.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]