Your message dated Thu, 15 Nov 2012 08:32:46 +0000
with message-id <e1tyusq-0000wj...@franck.debian.org>
and subject line Bug#693287: fixed in horizon 2012.1.1-7
has caused the Debian Bug report #693287,
regarding CVE-2012-5474: /etc/openstack-dashboard/local_settings.py is world
readable
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
693287: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693287
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: openstack-dashboard
Version: 2012.1.1-6
Severity: grave
CVE-2012-5474: /etc/openstack-dashboard/local_settings.py is world readable
--- End Message ---
--- Begin Message ---
Source: horizon
Source-Version: 2012.1.1-7
We believe that the bug you reported is fixed in the latest version of
horizon, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 693...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thomas Goirand <z...@debian.org> (supplier of updated horizon package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 15 Nov 2012 08:47:18 +0000
Source: horizon
Binary: python-django-horizon openstack-dashboard openstack-dashboard-apache
Architecture: source all
Version: 2012.1.1-7
Distribution: unstable
Urgency: high
Maintainer: PKG OpenStack <openstack-de...@lists.alioth.debian.org>
Changed-By: Thomas Goirand <z...@debian.org>
Description:
openstack-dashboard - OpenStack Dashboard
openstack-dashboard-apache - OpenStack Dashboard - Apache support
python-django-horizon - Django module providing web interaction with OpenStack
Closes: 693287
Changes:
horizon (2012.1.1-7) unstable; urgency=high
.
* CVE-2012-5474: The file /etc/openstack-dashboard/local_settings is not
world readable anymore (Closes: #693287).
Checksums-Sha1:
f835a31a07a1e4c95b22d54a31b5e1d46f9f0039 1935 horizon_2012.1.1-7.dsc
8fd89513f4811113234df4777334eb1e69c39a35 7665 horizon_2012.1.1-7.debian.tar.gz
af407f57ab1ff10d838fa7c64132ff34798f6c7d 391714
python-django-horizon_2012.1.1-7_all.deb
273c1dd70b6f872fd803e1197ff39bddae867ac5 195952
openstack-dashboard_2012.1.1-7_all.deb
0dc1b19bab038d93004dd1193cc1c9c3e6f70b7a 4128
openstack-dashboard-apache_2012.1.1-7_all.deb
Checksums-Sha256:
ce4575747403bdc07b36d876c566ecb4485c8b58f5c2ee2b07937e1bcd5f317b 1935
horizon_2012.1.1-7.dsc
4a73bbcc4299b2bdd13d79d29abf8acff036435c6adcdb5ce3c337abdc19eba4 7665
horizon_2012.1.1-7.debian.tar.gz
a030e0909cd67b3ada1f580059f03137c7f30492a1d24812731ef68a6739f1f1 391714
python-django-horizon_2012.1.1-7_all.deb
ced22961bd60fbdb7a18edabb6350e1fd8b9aa3b8f49b73350ddd1ad98494a15 195952
openstack-dashboard_2012.1.1-7_all.deb
f7197037eacafcc0515c59abdeeecd415b67b89bbeaa435b65588f569cbfc061 4128
openstack-dashboard-apache_2012.1.1-7_all.deb
Files:
705e7634f1f363d67949187b80bc2a06 1935 net extra horizon_2012.1.1-7.dsc
a15edc577f3300d779c47444e03e1165 7665 net extra
horizon_2012.1.1-7.debian.tar.gz
c0f16dc41f4692cfc984f53f337199c3 391714 python extra
python-django-horizon_2012.1.1-7_all.deb
1c58e96069c592e6e10f266c7242bad9 195952 net extra
openstack-dashboard_2012.1.1-7_all.deb
04d8018862614c9a9b0f2fa6b4f01001 4128 net extra
openstack-dashboard-apache_2012.1.1-7_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlCkrPIACgkQl4M9yZjvmknccQCfUNZiT7kPy8BlJuWg1KYdp5Ye
z+sAn1ErbvPstbzVuWp1OhYl/taeCTnu
=Mja8
-----END PGP SIGNATURE-----
--- End Message ---