Your message dated Sat, 08 May 2010 04:17:07 +0000
with message-id <e1oabtp-00069n...@ries.debian.org>
and subject line Bug#580628: fixed in dvipng 1.13-1
has caused the Debian Bug report #580628,
regarding dvipng: CVE-2010-0829
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
580628: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=580628
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dvipng
Severity: grave
Tags: security
Justification: user security hole
Please see https://bugs.launchpad.net/ubuntu/+source/texlive-bin/+bug/537638
Could you prepare an updated package for stable-security and send it
to t...@security.debian.org
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: dvipng
Source-Version: 1.13-1
We believe that the bug you reported is fixed in the latest version of
dvipng, which is due to be installed in the Debian FTP archive:
dvipng_1.13-1.debian.tar.gz
to main/d/dvipng/dvipng_1.13-1.debian.tar.gz
dvipng_1.13-1.dsc
to main/d/dvipng/dvipng_1.13-1.dsc
dvipng_1.13-1_amd64.deb
to main/d/dvipng/dvipng_1.13-1_amd64.deb
dvipng_1.13.orig.tar.gz
to main/d/dvipng/dvipng_1.13.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 580...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Varun Hiremath <va...@debian.org> (supplier of updated dvipng package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 07 May 2010 23:42:19 -0400
Source: dvipng
Binary: dvipng
Architecture: source amd64
Version: 1.13-1
Distribution: unstable
Urgency: low
Maintainer: Varun Hiremath <va...@debian.org>
Changed-By: Varun Hiremath <va...@debian.org>
Description:
dvipng - convert DVI files to PNG graphics
Closes: 580628
Changes:
dvipng (1.13-1) unstable; urgency=low
.
* New upstream release
- Fixes CVE-2010-0829, (Closes: #580628)
* Switch to source format 3.0
* Bump Standards-Version to 3.8.4
Checksums-Sha1:
c5f448d41a844e67bc3855fa1f41b890308bb74d 1182 dvipng_1.13-1.dsc
626568203e3f799c99da0f3e31edecb13ce202b6 169309 dvipng_1.13.orig.tar.gz
683e9a3cb4f9e5c8d430d94e489f3494e8f2a7d2 4472 dvipng_1.13-1.debian.tar.gz
299cb243ee0c68f617cc3b235b5906ba07f1b097 89740 dvipng_1.13-1_amd64.deb
Checksums-Sha256:
30b44e8e1f8e6325af64e1e339322473a0abf5b57687b2d62baa2e88060f95d5 1182
dvipng_1.13-1.dsc
cbbffb2769fddaeb904d255da4a09ded06699fa2c5cdc076b784645f59cfa5ab 169309
dvipng_1.13.orig.tar.gz
fae81b10b3337f33743319fe4e66fbed627184f094e94ef2c63f9756a4aee681 4472
dvipng_1.13-1.debian.tar.gz
e36aab650a81a2a822f54a5d114f8a938712dceb7466e8d02f0bb79d86f9dd20 89740
dvipng_1.13-1_amd64.deb
Files:
b956be3f888644e99582fc402e32c345 1182 utils optional dvipng_1.13-1.dsc
da8d062977cbfeb2fb39b81d28d0b7f3 169309 utils optional dvipng_1.13.orig.tar.gz
c0c1270fa0fd8401748d807b322bb272 4472 utils optional
dvipng_1.13-1.debian.tar.gz
8a354091f7b99309e54908964fde37fb 89740 utils optional dvipng_1.13-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFL5OGzPEFSUMxFMZcRAgqRAKC/RJCluUSay1QmW9foUNu/qfWEUgCfXC2V
3I/ees8Jyinjkjyl0PvdZgM=
=qIj4
-----END PGP SIGNATURE-----
--- End Message ---
