Your message dated Thu, 21 Jun 2007 09:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#429876: fixed in evolution-data-server 1.10.2-2
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: evolution-data-server
Version: 1.10.2-1
Severity: grave
Tags: security

E-D-S 2.11.4 has just been released with a fix for
http://bugs.gnome.org/447414 , which is a remotely-exploitable negative
array index.  I found this out by reading Philip Van Hoof's blog[0].  A
backport to GNOME's 2.18 branch is either present or in progress; I
can't tell from the bug report.

[0] http://pvanhoof.be/blog/index.php/2007/06/19/todays-new-evolution-release

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.22-rc5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages evolution-data-server depends on:
ii  evolutio 1.10.2-1                        architecture independent files for
ii  libbonob 2.18.0-2                        Bonobo CORBA interfaces library
ii  libc6    2.5-11                          GNU C Library: Shared libraries
ii  libcamel 1.10.2-1                        The Evolution MIME message handlin
ii  libcomer 1.39+1.40-WIP-2007.04.07+dfsg-2 common error description library
ii  libdb4.4 4.4.20-8                        Berkeley v4.4 Database Libraries [
ii  libebook 1.10.2-1                        Client library for evolution addre
ii  libecal1 1.10.2-1                        Client library for evolution calen
ii  libedata 1.10.2-1                        Backend library for evolution addr
ii  libedata 1.10.2-1                        Backend library for evolution cale
ii  libedata 1.10.2-1                        Utility library for evolution data
ii  libegrou 1.10.2-1                        Client library for accessing group
ii  libgconf 2.18.0.1-3                      GNOME configuration database syste
ii  libglib2 2.12.12-1                       The GLib library of C routines
ii  libgnome 2.18.0-4                        The GNOME 2 library - runtime file
ii  libgnome 1:2.18.1-2                      GNOME Virtual File System (runtime
ii  libgnutl 1.6.3-1                         the GNU TLS library - runtime libr
ii  libkrb53 1.6.dfsg.1-4                    MIT Kerberos runtime libraries
ii  libldap2 2.1.30-13.4                     OpenLDAP libraries
ii  libnspr4 4.6.6-3                         NetScape Portable Runtime Library
ii  libnss3- 3.11.5-3+b1                     Network Security Service libraries
ii  liborbit 1:2.14.7-0.1                    libraries for ORBit2 - a CORBA ORB
ii  libpopt0 1.10-3                          lib for parsing cmdline parameters
ii  libsoup2 2.2.100-1                       an HTTP library implementation in 
ii  libxml2  2.6.29.dfsg-1                   GNOME XML library
ii  zlib1g   1:1.2.3-15                      compression library - runtime

evolution-data-server recommends no packages.

-- no debconf information

-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
Screw you, AACS LA: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
Source: evolution-data-server
Source-Version: 1.10.2-2

We believe that the bug you reported is fixed in the latest version of
evolution-data-server, which is due to be installed in the Debian FTP archive:

evolution-data-server-common_1.10.2-2_all.deb
  to 
pool/main/e/evolution-data-server/evolution-data-server-common_1.10.2-2_all.deb
evolution-data-server-dbg_1.10.2-2_i386.deb
  to 
pool/main/e/evolution-data-server/evolution-data-server-dbg_1.10.2-2_i386.deb
evolution-data-server-dev_1.10.2-2_i386.deb
  to 
pool/main/e/evolution-data-server/evolution-data-server-dev_1.10.2-2_i386.deb
evolution-data-server_1.10.2-2.diff.gz
  to pool/main/e/evolution-data-server/evolution-data-server_1.10.2-2.diff.gz
evolution-data-server_1.10.2-2.dsc
  to pool/main/e/evolution-data-server/evolution-data-server_1.10.2-2.dsc
evolution-data-server_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/evolution-data-server_1.10.2-2_i386.deb
libcamel1.2-10_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libcamel1.2-10_1.10.2-2_i386.deb
libcamel1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libcamel1.2-dev_1.10.2-2_i386.deb
libebook1.2-9_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libebook1.2-9_1.10.2-2_i386.deb
libebook1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libebook1.2-dev_1.10.2-2_i386.deb
libecal1.2-7_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libecal1.2-7_1.10.2-2_i386.deb
libecal1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libecal1.2-dev_1.10.2-2_i386.deb
libedata-book1.2-2_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedata-book1.2-2_1.10.2-2_i386.deb
libedata-book1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedata-book1.2-dev_1.10.2-2_i386.deb
libedata-cal1.2-6_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedata-cal1.2-6_1.10.2-2_i386.deb
libedata-cal1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedata-cal1.2-dev_1.10.2-2_i386.deb
libedataserver1.2-9_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedataserver1.2-9_1.10.2-2_i386.deb
libedataserver1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedataserver1.2-dev_1.10.2-2_i386.deb
libedataserverui1.2-8_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedataserverui1.2-8_1.10.2-2_i386.deb
libedataserverui1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libedataserverui1.2-dev_1.10.2-2_i386.deb
libegroupwise1.2-13_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libegroupwise1.2-13_1.10.2-2_i386.deb
libegroupwise1.2-dev_1.10.2-2_i386.deb
  to pool/main/e/evolution-data-server/libegroupwise1.2-dev_1.10.2-2_i386.deb
libexchange-storage1.2-3_1.10.2-2_i386.deb
  to 
pool/main/e/evolution-data-server/libexchange-storage1.2-3_1.10.2-2_i386.deb
libexchange-storage1.2-dev_1.10.2-2_i386.deb
  to 
pool/main/e/evolution-data-server/libexchange-storage1.2-dev_1.10.2-2_i386.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Loic Minier <[EMAIL PROTECTED]> (supplier of updated evolution-data-server 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 21 Jun 2007 10:34:17 +0200
Source: evolution-data-server
Binary: libexchange-storage1.2-dev libedataserver1.2-dev libedata-cal1.2-dev 
libecal1.2-dev libedataserver1.2-9 libedata-cal1.2-6 evolution-data-server-dbg 
libcamel1.2-dev libebook1.2-9 libcamel1.2-10 libegroupwise1.2-13 
evolution-data-server libexchange-storage1.2-3 libecal1.2-7 
evolution-data-server-common libedata-book1.2-2 libedata-book1.2-dev 
evolution-data-server-dev libedataserverui1.2-dev libegroupwise1.2-dev 
libebook1.2-dev libedataserverui1.2-8
Architecture: source i386 all
Version: 1.10.2-2
Distribution: unstable
Urgency: high
Maintainer: Debian Evolution Maintainers <[EMAIL PROTECTED]>
Changed-By: Loic Minier <[EMAIL PROTECTED]>
Description: 
 evolution-data-server - evolution database backend server
 evolution-data-server-common - architecture independent files for Evolution 
Data Server
 evolution-data-server-dbg - evolution database backend server with debugging 
symbols
 evolution-data-server-dev - Development files for evolution-data-server (meta 
package)
 libcamel1.2-10 - The Evolution MIME message handling library
 libcamel1.2-dev - Development files for libcamel
 libebook1.2-9 - Client library for evolution address books
 libebook1.2-dev - Client library for evolution address books (development 
files)
 libecal1.2-7 - Client library for evolution calendars
 libecal1.2-dev - Client library for evolution calendars (development files)
 libedata-book1.2-2 - Backend library for evolution address books
 libedata-book1.2-dev - Backend library for evolution address books 
(development files)
 libedata-cal1.2-6 - Backend library for evolution calendars
 libedata-cal1.2-dev - Backend library for evolution calendars (development 
files)
 libedataserver1.2-9 - Utility library for evolution data servers
 libedataserver1.2-dev - Utility library for evolution data servers 
(development files)
 libedataserverui1.2-8 - GUI utility library for evolution data servers
 libedataserverui1.2-dev - GUI utility library for evolution data servers 
(development files
 libegroupwise1.2-13 - Client library for accessing groupwise POA through SOAP 
interface
 libegroupwise1.2-dev - Development files for libegroupwise
 libexchange-storage1.2-3 - Backend library for evolution calendars
 libexchange-storage1.2-dev - Backend library for evolution calendars 
(development files)
Closes: 426488 429876
Changes: 
 evolution-data-server (1.10.2-2) unstable; urgency=high
 .
   [ Oystein Gisnas ]
   * Extend description to cover mail, tasks and memos too.
     (closes: #426488)
 .
   [ Loic Minier ]
   * SECURITY: New patch, 65_imap-negative-array-index, fixes potential
     negative array index usage in IMAP code (remote); FEDORA-2007-0464;
     GNOME #447414; closes: #429876.
Files: 
 92493bdd4912916893ca1a582fe9f799 1734 gnome optional 
evolution-data-server_1.10.2-2.dsc
 61e77fb64b5871e17dc7d1d656d4828d 19726 gnome optional 
evolution-data-server_1.10.2-2.diff.gz
 b20c080436538676b9f600a8aa171b6e 2028022 gnome optional 
evolution-data-server-common_1.10.2-2_all.deb
 cd7fc22e465fee1db6a19524163d7acb 449548 gnome optional 
evolution-data-server_1.10.2-2_i386.deb
 d35bbac44f8a8c18e5623c8470adeeba 60182 devel optional 
evolution-data-server-dev_1.10.2-2_i386.deb
 aa60b585843d2a4ecb04e27ed2e45b23 3019398 gnome extra 
evolution-data-server-dbg_1.10.2-2_i386.deb
 3fe7de8c20d6bcdac86809fc47a13dd0 124484 libs optional 
libedataserver1.2-9_1.10.2-2_i386.deb
 f59c9e27486d4883c41a2812312bb749 139038 libdevel optional 
libedataserver1.2-dev_1.10.2-2_i386.deb
 de400a5b3d06ff13864679cc88e304c2 336888 libs optional 
libcamel1.2-10_1.10.2-2_i386.deb
 bf48008c9fef0a4a8820f3d602cfbaf3 124200 libdevel optional 
libcamel1.2-dev_1.10.2-2_i386.deb
 e250d0f7ed6f2426107f44feb2acd81d 135902 libs optional 
libebook1.2-9_1.10.2-2_i386.deb
 5be44a785bc15734382d28d278d08d8b 145640 libdevel optional 
libebook1.2-dev_1.10.2-2_i386.deb
 59f93942a19aa13d224f2debc6fb3af8 124444 libs optional 
libedataserverui1.2-8_1.10.2-2_i386.deb
 7b3d9ab864059d65b336ba6505154757 67810 libdevel optional 
libedataserverui1.2-dev_1.10.2-2_i386.deb
 d8c61cfd51711cde7770cc7bbcf5850c 101608 libs optional 
libedata-book1.2-2_1.10.2-2_i386.deb
 a40786295ae25a97e23a27c4621f418b 76556 libdevel optional 
libedata-book1.2-dev_1.10.2-2_i386.deb
 eaf9bd73a7c8801c942557edaf0de937 305430 libs optional 
libecal1.2-7_1.10.2-2_i386.deb
 c8841e750d560968b4a0bed09a5dd4b5 191712 libdevel optional 
libecal1.2-dev_1.10.2-2_i386.deb
 1dd4999f4be35bc7feb7323b2ad71b8c 110882 libs optional 
libedata-cal1.2-6_1.10.2-2_i386.deb
 31792897b0f8b4a71153cd1edbcc4588 116068 libdevel optional 
libedata-cal1.2-dev_1.10.2-2_i386.deb
 90980990719bb21174c0234e952e1af7 114148 libs optional 
libegroupwise1.2-13_1.10.2-2_i386.deb
 a9f2902e117875177b240af0d71a3b78 68692 libdevel optional 
libegroupwise1.2-dev_1.10.2-2_i386.deb
 97ba624d8ec54f4d5a8b9b701b4fc12d 178378 libs optional 
libexchange-storage1.2-3_1.10.2-2_i386.deb
 68fdd8854444e55645135a336f2c360c 100542 libdevel optional 
libexchange-storage1.2-dev_1.10.2-2_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGej014VUX8isJIMARAjLoAJ4iCRoz84Ac/ag4mmBFOu7IZsV7dQCgg58A
rPmElqZ6i81l+t8GPRFIxXw=
=8ubh
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to