Your message dated Wed, 14 Nov 2012 21:47:32 +0000
with message-id <e1tyko0-0008w8...@franck.debian.org>
and subject line Bug#688151: fixed in fwknop 2.0.0rc2-2+deb7u1
has caused the Debian Bug report #688151,
regarding [CVE 2012-4434, 4435, 4436] fwknop: Multiple security issues
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
688151: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688151
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: fwknop
Severity: grave
Tags: security patch
The new fwknop fixes many security problems:
http://seclists.org/oss-sec/2012/q3/509
It's fixed in 2.0.3. The link include the patches too.
Cheers, luciano
--- End Message ---
--- Begin Message ---
Source: fwknop
Source-Version: 2.0.0rc2-2+deb7u1
We believe that the bug you reported is fixed in the latest version of
fwknop, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 688...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Franck Joncourt <fra...@debian.org> (supplier of updated fwknop package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 07 Oct 2012 20:50:09 +0200
Source: fwknop
Binary: libfko0-dev libfko0-dbg libfko0 fwknop-server fwknop-client
Architecture: source i386
Version: 2.0.0rc2-2+deb7u1
Distribution: testing-proposed-updates
Urgency: high
Maintainer: Franck Joncourt <fra...@debian.org>
Changed-By: Franck Joncourt <fra...@debian.org>
Description:
fwknop-client - FireWall KNock OPerator client side - C version
fwknop-server - FireWall KNock OPerator server side - C version
libfko0 - system interface for user-level fko management
libfko0-dbg - debugging symbol for the libfko library
libfko0-dev - development library and header files for libfko
Closes: 688151
Changes:
fwknop (2.0.0rc2-2+deb7u1) testing-proposed-updates; urgency=high
.
* Patches to fix CVE (Closes: #688151):
- CVE-2012-4434
- CVE-2012-4435
- CVE-2012-4436
Checksums-Sha1:
d61509a17e3816603d76c1f7fb967a97db8b7e56 1385 fwknop_2.0.0rc2-2+deb7u1.dsc
30d2514549871ecfdea0f36487132c445f096e39 33151
fwknop_2.0.0rc2-2+deb7u1.debian.tar.gz
cb26262f93aa5754e0cc329a6a09c23ff59e13b2 66696
libfko0-dev_2.0.0rc2-2+deb7u1_i386.deb
bae2cbbb2ec0687628f6fc42a1789d64ab72ff61 164784
libfko0-dbg_2.0.0rc2-2+deb7u1_i386.deb
6734e37b58107084dad9541f1ede5bbc311986ad 44590
libfko0_2.0.0rc2-2+deb7u1_i386.deb
fc69438c73a1d8994718d48574bf6b93f15eecd2 57234
fwknop-server_2.0.0rc2-2+deb7u1_i386.deb
aaa256c576db92e33ec31dee705653d3457ae19c 37660
fwknop-client_2.0.0rc2-2+deb7u1_i386.deb
Checksums-Sha256:
faaa6d14f2bdd4e3526a7055a63361808a07a8eb498c4ff902f2ffa407d87263 1385
fwknop_2.0.0rc2-2+deb7u1.dsc
03fc8e2654bd4b757f9d0542deab2244550de4652c5cc46bac8925ef14115c98 33151
fwknop_2.0.0rc2-2+deb7u1.debian.tar.gz
360f6c6fe3d4d0fe5075551994a8ee77a8b8c71ac3e07108443d5bf0d11cc00e 66696
libfko0-dev_2.0.0rc2-2+deb7u1_i386.deb
261fc5f4308b608b5e712424ae07ad8cb0da566e891a9304e36b3df39035e549 164784
libfko0-dbg_2.0.0rc2-2+deb7u1_i386.deb
fd1c02c87496b1d472f6fe4576e72e0597a071cdb451107b24de5a1ad94cc467 44590
libfko0_2.0.0rc2-2+deb7u1_i386.deb
f9f91a8e250fa81c4119e5af722ace95e00673cf14c0bd65e46b3710a455e88d 57234
fwknop-server_2.0.0rc2-2+deb7u1_i386.deb
ca6cc437c91635c673fb2701456c6efbfb223ad3af86f0e4e93dc69682d31893 37660
fwknop-client_2.0.0rc2-2+deb7u1_i386.deb
Files:
12183efc70c65201ebafd713781024d8 1385 admin extra fwknop_2.0.0rc2-2+deb7u1.dsc
0ce852e5fbc1fa75dd91bf32318b73d6 33151 admin extra
fwknop_2.0.0rc2-2+deb7u1.debian.tar.gz
d73647b8d052f222d13ce65df62003b3 66696 libdevel extra
libfko0-dev_2.0.0rc2-2+deb7u1_i386.deb
24633fcddd207695c895ac6310f2eeaf 164784 debug extra
libfko0-dbg_2.0.0rc2-2+deb7u1_i386.deb
34a2c58dfa98661919a95e728167f296 44590 libs extra
libfko0_2.0.0rc2-2+deb7u1_i386.deb
37a380b7e2f2689c283318af716861d0 57234 admin extra
fwknop-server_2.0.0rc2-2+deb7u1_i386.deb
c858389418d6257ac35c53bf07ebf093 37660 admin extra
fwknop-client_2.0.0rc2-2+deb7u1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlCkD1gACgkQxJBTTnXAif4s1QCeOtVQBBJypFVhiQ65vQ58QGS+
33EAniVyNqJr2F4ZPjZ2J0S6+eFIxD2L
=kr2J
-----END PGP SIGNATURE-----
--- End Message ---