Your message dated Tue, 09 Nov 2010 00:47:16 +0000
with message-id <e1pfcmm-0001gt...@franck.debian.org>
and subject line Bug#598582: fixed in horde3 3.3.8+debian0-2
has caused the Debian Bug report #598582,
regarding horde3: Four security issues in Horde
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
598582: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598582
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: horde3
Severity: grave
Tags: security
Justification: user security hole
I suppose these issues reported here refer to the horde3
source package:
http://lists.horde.org/archives/announce/2010/000568.html
Cheers,
Moritz
-- System Information:
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
--- End Message ---
--- Begin Message ---
Source: horde3
Source-Version: 3.3.8+debian0-2
We believe that the bug you reported is fixed in the latest version of
horde3, which is due to be installed in the Debian FTP archive:
horde3_3.3.8+debian0-2.diff.gz
to main/h/horde3/horde3_3.3.8+debian0-2.diff.gz
horde3_3.3.8+debian0-2.dsc
to main/h/horde3/horde3_3.3.8+debian0-2.dsc
horde3_3.3.8+debian0-2_all.deb
to main/h/horde3/horde3_3.3.8+debian0-2_all.deb
pear-horde-channel_3.3.8+debian0-2_all.deb
to main/h/horde3/pear-horde-channel_3.3.8+debian0-2_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 598...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Gregory Colpart <r...@debian.org> (supplier of updated horde3 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.8
Date: Wed, 03 Nov 2010 23:44:17 +0100
Source: horde3
Binary: horde3 pear-horde-channel
Architecture: source all
Version: 3.3.8+debian0-2
Distribution: unstable
Urgency: medium
Maintainer: Horde Maintainers <pkg-horde-hack...@lists.alioth.debian.org>
Changed-By: Gregory Colpart <r...@debian.org>
Description:
horde3 - horde web application framework
pear-horde-channel - pear.horde.org channel
Closes: 597603 598582
Changes:
horde3 (3.3.8+debian0-2) unstable; urgency=medium
.
* Backport security patches from 3.3.9 and 3.3.10 to fix CVE-2010-3077
and CVE-2010-3694 (Closes: #598582)
* Backport upstream fix from 3.3.10 for SyncML bug: page sometimes deleting
more anchors than selected.
* Fix annoying bug in temp-cleanup.cron (Closes: #597603)
Checksums-Sha1:
f0f96bca975fd6b93f173b70a02e7d92286d1b74 1345 horde3_3.3.8+debian0-2.dsc
a39930407335e8ecfd43230b67bc8c9dc9af2f03 30009 horde3_3.3.8+debian0-2.diff.gz
3ad67a68adf38c1e95e35aa5b2e519e5ae4c9099 7704364 horde3_3.3.8+debian0-2_all.deb
9595140780aa26b86e07410824617aed5ba60a4d 16616
pear-horde-channel_3.3.8+debian0-2_all.deb
Checksums-Sha256:
45a6dd371a753e1c55ad1096bbf022705ab7ce2ea2d502cb1a22a6ea1b16880a 1345
horde3_3.3.8+debian0-2.dsc
da5fc4da1ed89517325f4ce797355dad0c9a20b0aef5e1828fc549026c20b996 30009
horde3_3.3.8+debian0-2.diff.gz
dcbec2d0918f7fe4a926dea197d6d88f9e948ef71ee328233f3e6531020297d0 7704364
horde3_3.3.8+debian0-2_all.deb
cb9aa27f77fd0b74d77f6343f9408af5e09fd84585b6409fa7734959aff7567a 16616
pear-horde-channel_3.3.8+debian0-2_all.deb
Files:
48e7bf709f61eca08e535762ff19b6d4 1345 web optional horde3_3.3.8+debian0-2.dsc
2e21599b6e09d4a4e9d379a7c3be0914 30009 web optional
horde3_3.3.8+debian0-2.diff.gz
8350161bae45983db030101b65aafaf9 7704364 web optional
horde3_3.3.8+debian0-2_all.deb
85086c68c40cc62b9a12c9f61b691b27 16616 web optional
pear-horde-channel_3.3.8+debian0-2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEAREDAAYFAkzYmJUACgkQMhdcDcECeg47FwCggU3MaMHNGRF7mRv7wZlfMQaz
2O4AmwQSSoniB4bGsmD6Oz8V5f2pvKEr
=PTLJ
-----END PGP SIGNATURE-----
--- End Message ---
