Your message dated Sun, 02 Dec 2012 17:32:28 +0000
with message-id <e1tfdp2-0001zw...@franck.debian.org>
and subject line Bug#693460: fixed in bcrypt 1.1-8
has caused the Debian Bug report #693460,
regarding bcrypt: Mangles at least some files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
693460: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693460
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: bcrypt
Version: 1.1-6
Severity: critical
Justification: causes serious data loss

Hi,

bcrypt doesn't handle at least some files (possibly large ones?).

This source file

 13G -rw-r--r-- 1 matthew matthew  13G Nov 16 16:01 CTS-2012-11.tar.bz2

when encrypted with bcrypt -cr, results in only 139M of output:

139M -rw-r--r-- 1 matthew matthew 139M Nov 16 17:20 CTS-2012-11.tar.bz2.bfe

which decrypts to a similar size:

139M -rw-r--r-- 1 matthew matthew 139M Nov 16 17:26 CTS-2012-11.tar.bz2

This is a very serious problem - had I not passed the -r argument,
bcrypt would have erased my original file, causing irreparable data
loss.

Regards,

Matthew

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages bcrypt depends on:
ii  libc6   2.13-35
ii  zlib1g  1:1.2.7.dfsg-13

bcrypt recommends no packages.

bcrypt suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: bcrypt
Source-Version: 1.1-8

We believe that the bug you reported is fixed in the latest version of
bcrypt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 693...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Kevin Coyner <kcoy...@debian.org> (supplier of updated bcrypt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 02 Dec 2012 17:15:26 +0000
Source: bcrypt
Binary: bcrypt
Architecture: source amd64
Version: 1.1-8
Distribution: unstable
Urgency: low
Maintainer: Kevin Coyner <kcoy...@debian.org>
Changed-By: Kevin Coyner <kcoy...@debian.org>
Description: 
 bcrypt     - Cross platform file encryption utility using blowfish
Closes: 693460
Changes: 
 bcrypt (1.1-8) unstable; urgency=low
 .
   * Additional RC bug closed with patch added version 1.1-7. Closes: #693460.
Checksums-Sha1: 
 9a5934f3fc7c22e5900ee1b4eeb8dfbfb072553b 1315 bcrypt_1.1-8.dsc
 b9a1cbbb213d58c0af46cfec726eb90921efc16a 7164 bcrypt_1.1-8.diff.gz
 afdd36c6bba57dedf967c2adf9c722510342270d 20184 bcrypt_1.1-8_amd64.deb
Checksums-Sha256: 
 bd845c8396cab86c0517c2e43d343221f8e548556608d8d388fc685d6e2bebce 1315 
bcrypt_1.1-8.dsc
 3e568d9d9fa5f37e4e2d5ceb3e04ef5a6bf99aa66e7594edcf76c95da1ba7aae 7164 
bcrypt_1.1-8.diff.gz
 52f6be6560991b972614773628c70a3732e8c65fa05ce3d20b9ef2479e0432ac 20184 
bcrypt_1.1-8_amd64.deb
Files: 
 0df13ea75235fa0058f1115a3fe9d1af 1315 utils optional bcrypt_1.1-8.dsc
 f003599b766ed03a97a3de5fc2c7380b 7164 utils optional bcrypt_1.1-8.diff.gz
 9bdf63267718f64e727242ccbec27c7b 20184 utils optional bcrypt_1.1-8_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iQEcBAEBCAAGBQJQu406AAoJEOuzGmLIXY9xYeIIAKAfXXY/wV6HBIYSl2UhKt85
Y0H2kM0ja+SKd+rGeE8strEqyRQVcTU+Etw4LnmKN6oS02hkwiA1a7zUpHt7zBPY
BGT/FvUEUOIo7b/SNUsdiWAIs60mjKfnPhRfazhLY5Q7T8UT8o0tsPH9gfkBI+WW
Uc/PCfy3wqUsInYjhuwzyeI4j7aNqx8ujIxpLJYF9yVItQVcnX6L0Gxc2gdwnNZu
PY6U9atJ0kVSXrbd/G45D3BNOBpm9l2ElAr5bYnZJZmp6BDh8WYMPrIH+HPMZxb1
XND/Juh2QNWsUZvVfRzsjo7Re5rhcdQ9pTlM2Nog14remzN7O1pRd2O5VvilwoA=
=MGAf
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to