Your message dated Sat, 06 Jul 2013 22:18:33 +0000
with message-id <e1uvaol-0007kd...@franck.debian.org>
and subject line Bug#694176: fixed in android-tools 4.2.2+git20130529-2.1
has caused the Debian Bug report #694176,
regarding adb gives access to devices without warning, without authentication
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
694176: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694176
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: android-tools-adb
Version: 4.1.1+git20120801-1
Severity: grave
Tags: security
adb starts a daemon on first call without asking the user. This daemon
listens on a TCP port on localhost:
| $ id -u
| 1000
| $ netstat -tlpen | …
| Proto Local Address Foreign Address State User PID/Program name
| tcp 127.0.0.1:5037 0.0.0.0:* LISTEN 1000 22319/adb
This daemon does not feature any user authentication and allows other
users to access the connected devices with the permissions of the user
running the daemon:
| $ id -u
| 1001
| $ adb shell
| shell@android:/ $ ^D
Bastian
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.6-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages android-tools-adb depends on:
ii libc6 2.13-35
ii zlib1g 1:1.2.7.dfsg-13
android-tools-adb recommends no packages.
android-tools-adb suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: android-tools
Source-Version: 4.2.2+git20130529-2.1
We believe that the bug you reported is fixed in the latest version of
android-tools, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 694...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hilko Bengen <ben...@debian.org> (supplier of updated android-tools package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 04 Jul 2013 23:28:34 +0200
Source: android-tools
Binary: android-tools-adb android-tools-adbd android-tools-fastboot
android-tools-fsutils
Architecture: source amd64
Version: 4.2.2+git20130529-2.1
Distribution: unstable
Urgency: low
Maintainer: Hilko Bengen <ben...@debian.org>
Changed-By: Hilko Bengen <ben...@debian.org>
Description:
android-tools-adb - Android Debug Bridge CLI tool
android-tools-adbd - Android Debug Bridge daemon
android-tools-fastboot - Android Fastboot protocol CLI tool
android-tools-fsutils - Android ext4 utilities with sparse support
Closes: 694176
Changes:
android-tools (4.2.2+git20130529-2.1) unstable; urgency=low
.
* Non-maintainer upload.
* adb: Use local socket by default (Closes: #694176)
Checksums-Sha1:
7ed2fe176a13e31f09ebee4903b8c3e42480b4b3 1645
android-tools_4.2.2+git20130529-2.1.dsc
e49e454638f793066882e01db755a4b730f08058 13262
android-tools_4.2.2+git20130529-2.1.debian.tar.gz
2d4ddadd5a2ba5d8fb07f65a76ad142fe9eaafce 77954
android-tools-adb_4.2.2+git20130529-2.1_amd64.deb
c54288899613e2db5871ff40141bf22037ca80e5 56080
android-tools-fastboot_4.2.2+git20130529-2.1_amd64.deb
0968d1aefd1101c2eb11110a4444e63ed9aa9a34 239734
android-tools-fsutils_4.2.2+git20130529-2.1_amd64.deb
Checksums-Sha256:
f1247b823401c0673b781d0e045bb2800f43e5407f9d68cf8b3108a677a179d0 1645
android-tools_4.2.2+git20130529-2.1.dsc
ac0b812a7e48bc434fae45aca0227189f5d8a1234efc5c3d5d736fbf12b25eac 13262
android-tools_4.2.2+git20130529-2.1.debian.tar.gz
5bd1bc2b54f45c4a99de26aeba93b4750cccaea15fa643748336112b8fdd0d83 77954
android-tools-adb_4.2.2+git20130529-2.1_amd64.deb
0d7faea4cd8bf61ad2aef82049afc6cba6a652c7f9fe6fe6d9672f646924e295 56080
android-tools-fastboot_4.2.2+git20130529-2.1_amd64.deb
979aecae56b78a82ef7d1b14f29a202f68de761d40d5e7bc5aca42eff0beed9e 239734
android-tools-fsutils_4.2.2+git20130529-2.1_amd64.deb
Files:
aeec69499d93753ad2cb03acd58560be 1645 devel extra
android-tools_4.2.2+git20130529-2.1.dsc
fa2693decca51a57ff91de96a93a7e3c 13262 devel extra
android-tools_4.2.2+git20130529-2.1.debian.tar.gz
51772034f325d18273724574b3e7dd52 77954 devel extra
android-tools-adb_4.2.2+git20130529-2.1_amd64.deb
8e920c6ca839e78da53558d89d4c46e4 56080 devel extra
android-tools-fastboot_4.2.2+git20130529-2.1_amd64.deb
2491cf3678c64aa481a7f78e5d561348 239734 devel extra
android-tools-fsutils_4.2.2+git20130529-2.1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlHV6+MACgkQUCgnLz/SlGgDMACfVL5uuZcC0Re50tmpC2WgcMuz
r2IAoMlRcH4T/L4nF+ebynwmOQP4Y5XZ
=oNck
-----END PGP SIGNATURE-----
--- End Message ---