Your message dated Wed, 4 May 2005 18:47:27 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug in digest handling code leads to infinite loop
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 11 Apr 2005 00:31:51 +0000
>From [EMAIL PROTECTED] Sun Apr 10 17:31:51 2005
Return-path: <[EMAIL PROTECTED]>
Received: from fed1rmmtao11.cox.net [68.230.241.28]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DKmqE-0006Uv-00; Sun, 10 Apr 2005 17:31:50 -0700
Received: from P450.internal.cowart.net ([68.5.38.130])
by fed1rmmtao11.cox.net
(InterMail vM.6.01.04.00 201-2131-118-20041027) with ESMTP
id <[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>; Sun, 10 Apr 2005 20:31:18 -0400
Received: from jcowart (pom-stu2-94-7.pomona.edu [134.173.94.7])
by P450.internal.cowart.net (mail.cowart.net) with ESMTP id 227571012F
for <[EMAIL PROTECTED]>; Sun, 10 Apr 2005 17:31:19 -0700 (PDT)
From: "Jefferson Cowart" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Bug in digest handling code leads to infinite loop
Date: Sun, 10 Apr 2005 17:32:30 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
Thread-Index: AcU9+Oaa/+JzRiFuToK9vPi0597tnQAM3EWw
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
In-Reply-To: <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-7.9 required=4.0 tests=BAYES_00,HAS_PACKAGE,
MISSING_OUTLOOK_NAME autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: libclamav1
Severity: important
Tags: sarge
(Please read the thread below for more details.)
The version of clamav currently in sarge has a bug in the digest handling
that can lead to an infinte loop. This was initially reported in bug 299469.
(The bug has been fixed in version 0.83.84rc1-1 which is currently in sid.)
Normally I would just reopen that bug and tag it sarge, but as that bug has
an example problem message attached when the bug is closed the problem
message would be sent again and anyone who hasn't upgraded would once again
have problems. As such I'm creating a new bug to track the status of this in
sarge. (Sorry to handle this in a non-standard way, but I believe the
thread below explains why this is needed.)
----------------
Thanks
Jefferson Cowart
[EMAIL PROTECTED]
> -----Original Message-----
> From: Stephen Gran [mailto:[EMAIL PROTECTED]
> Sent: Sunday, April 10, 2005 11:13
> To: Jefferson Cowart
> Subject: Re: Bug 299469
>
> On Sun, Apr 10, 2005 at 10:46:11AM -0700, Jefferson Cowart said:
> > I'm one of the people who has been bit by the bug in 299469
> (twice now -
> > Once on bug open and once on bug close). Since that bug is
> still present in
> > Sarge and (at least on my system) can lead to a DOS against
> the mail server,
> > I want to make sure it gets fixed in sarge. Normally I
> would simply re-open
> > the bug report and then tag the bug as sarge. However if I
> do that when the
> > bug is closed I'm worried that I will once again get the
> problem e-mail and
> > again have problems with my mail server until I manually
> remove the message.
> > Do you have any suggestions on tracking that bug to ensure
> sarge gets a
> > fixed version?
>
> Hmm. That's a good point. I guess the simplest is to just open a new
> bug, priority normal and tagged sarge, that says that the
> digest handling
> bug is still present in sarge. That way it can be tracked
> manually, and
> it won't have any of the problems of the old bug report. I normally
> wouldn't want to handle it this way (it seems counter intuitive, at
> least) but it seems the cleanest way to avoid the potential for
> problems.
>
> You can also grab the latest version from p.d.o/~sgran, although
> upstream has not yet labeled the version stable. I am running it here
> without any problems so far, but for Debian, I am a little more
> conservative.
>
> Take care,
> --
>
> --------------------------------------------------------------
> ------------
> | Stephen Gran | Genius doesn't work on an
> assembly line |
> | [EMAIL PROTECTED] | basis. You can't simply
> say, "Today I |
> | http://www.lobefin.net/~steve | will be brilliant." --
> Kirk, "The |
> | | Ultimate Computer", stardate
> 4731.3 |
>
> --------------------------------------------------------------
> ------------
>
---------------------------------------
Received: (at 304123-done) by bugs.debian.org; 5 May 2005 01:47:28 +0000
>From [EMAIL PROTECTED] Wed May 04 18:47:28 2005
Return-path: <[EMAIL PROTECTED]>
Received: from dsl093-039-086.pdx1.dsl.speakeasy.net (localhost.localdomain)
[66.93.39.86]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DTVSa-0004Cc-00; Wed, 04 May 2005 18:47:28 -0700
Received: by localhost.localdomain (Postfix, from userid 1000)
id E4628172843; Wed, 4 May 2005 18:47:27 -0700 (PDT)
Date: Wed, 4 May 2005 18:47:27 -0700
From: Steve Langasek <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Bug in digest handling code leads to infinite loop
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="mPTHnM80CEnHQ2WJ"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--mPTHnM80CEnHQ2WJ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Version 0.84-2 of clamav has been accepted into testing; closing this bug
now.
Thanks,
--=20
Steve Langasek
postmodern programmer
--mPTHnM80CEnHQ2WJ
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFCeXsrKN6ufymYLloRAki+AJ46QTWPFGS3R9gHCXPgNL0dD2F6oACgzXWg
3t0qUpHDKK/FkFeuBaoEKWk=
=yZCz
-----END PGP SIGNATURE-----
--mPTHnM80CEnHQ2WJ--
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
