Your message dated Sat, 19 Nov 2005 16:02:22 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Bug#338434: fixed in sylpheed-gtk1 1.0.6-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 10 Nov 2005 09:13:12 +0000
>From [EMAIL PROTECTED] Thu Nov 10 01:13:12 2005
Return-path: <[EMAIL PROTECTED]>
Received: from inutil.org ([193.22.164.111]
helo=vserver151.vserver151.serverflex.de)
by spohr.debian.org with esmtp (Exim 4.50)
id 1Ea8Ua-0001vY-BH
for [EMAIL PROTECTED]; Thu, 10 Nov 2005 01:13:12 -0800
Received: from wlan-client-280.informatik.uni-bremen.de ([134.102.117.30]
helo=localhost.localdomain)
by vserver151.vserver151.serverflex.de with esmtpsa
(TLS-1.0:RSA_AES_256_CBC_SHA:32)
(Exim 4.50)
id 1Ea8UX-0000qk-OL
for [EMAIL PROTECTED]; Thu, 10 Nov 2005 10:13:09 +0100
Received: from jmm by localhost.localdomain with local (Exim 4.54)
id 1Ea8UR-0001rI-Mw; Thu, 10 Nov 2005 10:13:03 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Moritz Muehlenhoff <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: sylpheed: Buffer overflow in LDIF import
X-Mailer: reportbug 3.17
Date: Thu, 10 Nov 2005 10:13:03 +0100
X-Debbugs-Cc: Debian Security Team <[EMAIL PROTECTED]>
Message-Id: <[EMAIL PROTECTED]>
X-SA-Exim-Connect-IP: 134.102.117.30
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
X-SA-Exim-Scanned: No (on vserver151.vserver151.serverflex.de); SAEximRunCond
expanded to false
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-11.0 required=4.0 tests=BAYES_00,HAS_PACKAGE,
X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02
Package: sylpheed
Severity: grave
Tags: security
Justification: user security hole
A remotely exploitable buffer overflow was found in Sylpheed. Quoting
from the web site:
| Since a security hole was discovered, the fixed versions were released.
| All users are recommended to upgrade.
|
| There was a bug that caused buffer overflow in the LDIF import routine
| of the addressbook. This bug exists in every version since 0.6.4. It
| only affects when the LDIF import feature is used.
This has been fixed in 2.0.4 and 2.1.6. Stable and oldstable should be
affected as well, if the LDIF import feature is available in the Debian
package.
Cheers,
Moritz
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.14-1-686
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)
---------------------------------------
Received: (at 338434-close) by bugs.debian.org; 20 Nov 2005 00:11:20 +0000
>From [EMAIL PROTECTED] Sat Nov 19 16:11:20 2005
Return-path: <[EMAIL PROTECTED]>
Received: from katie by spohr.debian.org with local (Exim 4.50)
id 1Edcf0-0007gt-TY; Sat, 19 Nov 2005 16:02:22 -0800
From: Ricardo Mones <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.56 $
Subject: Bug#338434: fixed in sylpheed-gtk1 1.0.6-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Sat, 19 Nov 2005 16:02:22 -0800
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level:
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
Source: sylpheed-gtk1
Source-Version: 1.0.6-1
We believe that the bug you reported is fixed in the latest version of
sylpheed-gtk1, which is due to be installed in the Debian FTP archive:
sylpheed-gtk1-i18n_1.0.6-1_all.deb
to pool/main/s/sylpheed-gtk1/sylpheed-gtk1-i18n_1.0.6-1_all.deb
sylpheed-gtk1_1.0.6-1.diff.gz
to pool/main/s/sylpheed-gtk1/sylpheed-gtk1_1.0.6-1.diff.gz
sylpheed-gtk1_1.0.6-1.dsc
to pool/main/s/sylpheed-gtk1/sylpheed-gtk1_1.0.6-1.dsc
sylpheed-gtk1_1.0.6-1_i386.deb
to pool/main/s/sylpheed-gtk1/sylpheed-gtk1_1.0.6-1_i386.deb
sylpheed-gtk1_1.0.6.orig.tar.gz
to pool/main/s/sylpheed-gtk1/sylpheed-gtk1_1.0.6.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ricardo Mones <[EMAIL PROTECTED]> (supplier of updated sylpheed-gtk1 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 19 Nov 2005 20:41:27 +0100
Source: sylpheed-gtk1
Binary: sylpheed-gtk1 sylpheed-gtk1-i18n
Architecture: source i386 all
Version: 1.0.6-1
Distribution: unstable
Urgency: high
Maintainer: Ricardo Mones <[EMAIL PROTECTED]>
Changed-By: Ricardo Mones <[EMAIL PROTECTED]>
Description:
sylpheed-gtk1 - Light weight e-mail client with GTK+
sylpheed-gtk1-i18n - Locale data for Sylpheed (i18n support)
Closes: 338434
Changes:
sylpheed-gtk1 (1.0.6-1) unstable; urgency=high
.
* New upstream release (security release).
- Buffer overflow on LDIF import fixed (Closes: #338434)
* debian/control
- Built now with libreadline5-dev, removed unused sharutils.
Files:
061eaa8a0bb745b7370b94c98237d6ed 950 mail optional sylpheed-gtk1_1.0.6-1.dsc
4f1fc08cf9818ea18f209fd62bb80518 3529371 mail optional
sylpheed-gtk1_1.0.6.orig.tar.gz
1217479d73153e9bafd6ed1689c6626e 16137 mail optional
sylpheed-gtk1_1.0.6-1.diff.gz
4dc53d614625717f6db5655ed6c74f01 1072372 mail optional
sylpheed-gtk1-i18n_1.0.6-1_all.deb
846a91e604ac17ced860d9405913cd30 677760 mail optional
sylpheed-gtk1_1.0.6-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDf7bCt1anjIgqbEsRAnNDAKDsLukIFlPnKjqX3wcCgE12aVda1gCg6SDC
ESQJHOPRyR4DDvwApK+G+hY=
=MJcP
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
