Your message dated Thu, 21 Jun 2007 09:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#429876: fixed in evolution-data-server 1.10.2-2
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: evolution-data-server
Version: 1.10.2-1
Severity: grave
Tags: security
E-D-S 2.11.4 has just been released with a fix for
http://bugs.gnome.org/447414 , which is a remotely-exploitable negative
array index. I found this out by reading Philip Van Hoof's blog[0]. A
backport to GNOME's 2.18 branch is either present or in progress; I
can't tell from the bug report.
[0] http://pvanhoof.be/blog/index.php/2007/06/19/todays-new-evolution-release
-- System Information:
Debian Release: lenny/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.22-rc5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages evolution-data-server depends on:
ii evolutio 1.10.2-1 architecture independent files for
ii libbonob 2.18.0-2 Bonobo CORBA interfaces library
ii libc6 2.5-11 GNU C Library: Shared libraries
ii libcamel 1.10.2-1 The Evolution MIME message handlin
ii libcomer 1.39+1.40-WIP-2007.04.07+dfsg-2 common error description library
ii libdb4.4 4.4.20-8 Berkeley v4.4 Database Libraries [
ii libebook 1.10.2-1 Client library for evolution addre
ii libecal1 1.10.2-1 Client library for evolution calen
ii libedata 1.10.2-1 Backend library for evolution addr
ii libedata 1.10.2-1 Backend library for evolution cale
ii libedata 1.10.2-1 Utility library for evolution data
ii libegrou 1.10.2-1 Client library for accessing group
ii libgconf 2.18.0.1-3 GNOME configuration database syste
ii libglib2 2.12.12-1 The GLib library of C routines
ii libgnome 2.18.0-4 The GNOME 2 library - runtime file
ii libgnome 1:2.18.1-2 GNOME Virtual File System (runtime
ii libgnutl 1.6.3-1 the GNU TLS library - runtime libr
ii libkrb53 1.6.dfsg.1-4 MIT Kerberos runtime libraries
ii libldap2 2.1.30-13.4 OpenLDAP libraries
ii libnspr4 4.6.6-3 NetScape Portable Runtime Library
ii libnss3- 3.11.5-3+b1 Network Security Service libraries
ii liborbit 1:2.14.7-0.1 libraries for ORBit2 - a CORBA ORB
ii libpopt0 1.10-3 lib for parsing cmdline parameters
ii libsoup2 2.2.100-1 an HTTP library implementation in
ii libxml2 2.6.29.dfsg-1 GNOME XML library
ii zlib1g 1:1.2.3-15 compression library - runtime
evolution-data-server recommends no packages.
-- no debconf information
--
brian m. carlson / brian with sandals: Houston, Texas, US
+1 713 440 7475 | http://crustytoothpaste.ath.cx/~bmc | My opinion only
Screw you, AACS LA: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
OpenPGP: RSA v4 4096b 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: evolution-data-server
Source-Version: 1.10.2-2
We believe that the bug you reported is fixed in the latest version of
evolution-data-server, which is due to be installed in the Debian FTP archive:
evolution-data-server-common_1.10.2-2_all.deb
to
pool/main/e/evolution-data-server/evolution-data-server-common_1.10.2-2_all.deb
evolution-data-server-dbg_1.10.2-2_i386.deb
to
pool/main/e/evolution-data-server/evolution-data-server-dbg_1.10.2-2_i386.deb
evolution-data-server-dev_1.10.2-2_i386.deb
to
pool/main/e/evolution-data-server/evolution-data-server-dev_1.10.2-2_i386.deb
evolution-data-server_1.10.2-2.diff.gz
to pool/main/e/evolution-data-server/evolution-data-server_1.10.2-2.diff.gz
evolution-data-server_1.10.2-2.dsc
to pool/main/e/evolution-data-server/evolution-data-server_1.10.2-2.dsc
evolution-data-server_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/evolution-data-server_1.10.2-2_i386.deb
libcamel1.2-10_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libcamel1.2-10_1.10.2-2_i386.deb
libcamel1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libcamel1.2-dev_1.10.2-2_i386.deb
libebook1.2-9_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libebook1.2-9_1.10.2-2_i386.deb
libebook1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libebook1.2-dev_1.10.2-2_i386.deb
libecal1.2-7_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libecal1.2-7_1.10.2-2_i386.deb
libecal1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libecal1.2-dev_1.10.2-2_i386.deb
libedata-book1.2-2_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedata-book1.2-2_1.10.2-2_i386.deb
libedata-book1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedata-book1.2-dev_1.10.2-2_i386.deb
libedata-cal1.2-6_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedata-cal1.2-6_1.10.2-2_i386.deb
libedata-cal1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedata-cal1.2-dev_1.10.2-2_i386.deb
libedataserver1.2-9_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedataserver1.2-9_1.10.2-2_i386.deb
libedataserver1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedataserver1.2-dev_1.10.2-2_i386.deb
libedataserverui1.2-8_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedataserverui1.2-8_1.10.2-2_i386.deb
libedataserverui1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libedataserverui1.2-dev_1.10.2-2_i386.deb
libegroupwise1.2-13_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libegroupwise1.2-13_1.10.2-2_i386.deb
libegroupwise1.2-dev_1.10.2-2_i386.deb
to pool/main/e/evolution-data-server/libegroupwise1.2-dev_1.10.2-2_i386.deb
libexchange-storage1.2-3_1.10.2-2_i386.deb
to
pool/main/e/evolution-data-server/libexchange-storage1.2-3_1.10.2-2_i386.deb
libexchange-storage1.2-dev_1.10.2-2_i386.deb
to
pool/main/e/evolution-data-server/libexchange-storage1.2-dev_1.10.2-2_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Loic Minier <[EMAIL PROTECTED]> (supplier of updated evolution-data-server
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 21 Jun 2007 10:34:17 +0200
Source: evolution-data-server
Binary: libexchange-storage1.2-dev libedataserver1.2-dev libedata-cal1.2-dev
libecal1.2-dev libedataserver1.2-9 libedata-cal1.2-6 evolution-data-server-dbg
libcamel1.2-dev libebook1.2-9 libcamel1.2-10 libegroupwise1.2-13
evolution-data-server libexchange-storage1.2-3 libecal1.2-7
evolution-data-server-common libedata-book1.2-2 libedata-book1.2-dev
evolution-data-server-dev libedataserverui1.2-dev libegroupwise1.2-dev
libebook1.2-dev libedataserverui1.2-8
Architecture: source i386 all
Version: 1.10.2-2
Distribution: unstable
Urgency: high
Maintainer: Debian Evolution Maintainers <[EMAIL PROTECTED]>
Changed-By: Loic Minier <[EMAIL PROTECTED]>
Description:
evolution-data-server - evolution database backend server
evolution-data-server-common - architecture independent files for Evolution
Data Server
evolution-data-server-dbg - evolution database backend server with debugging
symbols
evolution-data-server-dev - Development files for evolution-data-server (meta
package)
libcamel1.2-10 - The Evolution MIME message handling library
libcamel1.2-dev - Development files for libcamel
libebook1.2-9 - Client library for evolution address books
libebook1.2-dev - Client library for evolution address books (development
files)
libecal1.2-7 - Client library for evolution calendars
libecal1.2-dev - Client library for evolution calendars (development files)
libedata-book1.2-2 - Backend library for evolution address books
libedata-book1.2-dev - Backend library for evolution address books
(development files)
libedata-cal1.2-6 - Backend library for evolution calendars
libedata-cal1.2-dev - Backend library for evolution calendars (development
files)
libedataserver1.2-9 - Utility library for evolution data servers
libedataserver1.2-dev - Utility library for evolution data servers
(development files)
libedataserverui1.2-8 - GUI utility library for evolution data servers
libedataserverui1.2-dev - GUI utility library for evolution data servers
(development files
libegroupwise1.2-13 - Client library for accessing groupwise POA through SOAP
interface
libegroupwise1.2-dev - Development files for libegroupwise
libexchange-storage1.2-3 - Backend library for evolution calendars
libexchange-storage1.2-dev - Backend library for evolution calendars
(development files)
Closes: 426488 429876
Changes:
evolution-data-server (1.10.2-2) unstable; urgency=high
.
[ Oystein Gisnas ]
* Extend description to cover mail, tasks and memos too.
(closes: #426488)
.
[ Loic Minier ]
* SECURITY: New patch, 65_imap-negative-array-index, fixes potential
negative array index usage in IMAP code (remote); FEDORA-2007-0464;
GNOME #447414; closes: #429876.
Files:
92493bdd4912916893ca1a582fe9f799 1734 gnome optional
evolution-data-server_1.10.2-2.dsc
61e77fb64b5871e17dc7d1d656d4828d 19726 gnome optional
evolution-data-server_1.10.2-2.diff.gz
b20c080436538676b9f600a8aa171b6e 2028022 gnome optional
evolution-data-server-common_1.10.2-2_all.deb
cd7fc22e465fee1db6a19524163d7acb 449548 gnome optional
evolution-data-server_1.10.2-2_i386.deb
d35bbac44f8a8c18e5623c8470adeeba 60182 devel optional
evolution-data-server-dev_1.10.2-2_i386.deb
aa60b585843d2a4ecb04e27ed2e45b23 3019398 gnome extra
evolution-data-server-dbg_1.10.2-2_i386.deb
3fe7de8c20d6bcdac86809fc47a13dd0 124484 libs optional
libedataserver1.2-9_1.10.2-2_i386.deb
f59c9e27486d4883c41a2812312bb749 139038 libdevel optional
libedataserver1.2-dev_1.10.2-2_i386.deb
de400a5b3d06ff13864679cc88e304c2 336888 libs optional
libcamel1.2-10_1.10.2-2_i386.deb
bf48008c9fef0a4a8820f3d602cfbaf3 124200 libdevel optional
libcamel1.2-dev_1.10.2-2_i386.deb
e250d0f7ed6f2426107f44feb2acd81d 135902 libs optional
libebook1.2-9_1.10.2-2_i386.deb
5be44a785bc15734382d28d278d08d8b 145640 libdevel optional
libebook1.2-dev_1.10.2-2_i386.deb
59f93942a19aa13d224f2debc6fb3af8 124444 libs optional
libedataserverui1.2-8_1.10.2-2_i386.deb
7b3d9ab864059d65b336ba6505154757 67810 libdevel optional
libedataserverui1.2-dev_1.10.2-2_i386.deb
d8c61cfd51711cde7770cc7bbcf5850c 101608 libs optional
libedata-book1.2-2_1.10.2-2_i386.deb
a40786295ae25a97e23a27c4621f418b 76556 libdevel optional
libedata-book1.2-dev_1.10.2-2_i386.deb
eaf9bd73a7c8801c942557edaf0de937 305430 libs optional
libecal1.2-7_1.10.2-2_i386.deb
c8841e750d560968b4a0bed09a5dd4b5 191712 libdevel optional
libecal1.2-dev_1.10.2-2_i386.deb
1dd4999f4be35bc7feb7323b2ad71b8c 110882 libs optional
libedata-cal1.2-6_1.10.2-2_i386.deb
31792897b0f8b4a71153cd1edbcc4588 116068 libdevel optional
libedata-cal1.2-dev_1.10.2-2_i386.deb
90980990719bb21174c0234e952e1af7 114148 libs optional
libegroupwise1.2-13_1.10.2-2_i386.deb
a9f2902e117875177b240af0d71a3b78 68692 libdevel optional
libegroupwise1.2-dev_1.10.2-2_i386.deb
97ba624d8ec54f4d5a8b9b701b4fc12d 178378 libs optional
libexchange-storage1.2-3_1.10.2-2_i386.deb
68fdd8854444e55645135a336f2c360c 100542 libdevel optional
libexchange-storage1.2-dev_1.10.2-2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFGej014VUX8isJIMARAjLoAJ4iCRoz84Ac/ag4mmBFOu7IZsV7dQCgg58A
rPmElqZ6i81l+t8GPRFIxXw=
=8ubh
-----END PGP SIGNATURE-----
--- End Message ---