Your message dated Sat, 11 Jan 2014 06:03:25 +0000 with message-id <e1w1rfj-0000hj...@franck.debian.org> and subject line Bug#734836: fixed in ruby-nokogiri 1.6.1+ds-1 has caused the Debian Bug report #734836, regarding ruby-nokogiri: CVE-2013-6460 CVE-2013-6461 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 734836: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734836 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: ruby-nokogiri Severity: grave Tags: security Justification: user security hole Hi, please see https://groups.google.com/forum/#!topic/ruby-security-ann/DeJpjTAg1FA Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: ruby-nokogiri Source-Version: 1.6.1+ds-1 We believe that the bug you reported is fixed in the latest version of ruby-nokogiri, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 734...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Cédric Boutillier <bou...@debian.org> (supplier of updated ruby-nokogiri package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 11 Jan 2014 06:48:45 +0100 Source: ruby-nokogiri Binary: ruby-nokogiri Architecture: source amd64 Version: 1.6.1+ds-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintain...@lists.alioth.debian.org> Changed-By: Cédric Boutillier <bou...@debian.org> Description: ruby-nokogiri - HTML, XML, SAX, and Reader parser for Ruby Closes: 734836 Changes: ruby-nokogiri (1.6.1+ds-1) unstable; urgency=medium . * Imported Upstream version 1.6.1+ds - version 1.6.1 fixes security issues CVE-2013-6460 CVE-2013-6461 (Closes: #734836) * Mention in copyright file and README.source that the tarball is repacked to remove convenience copies * Add a dversionmangle option in debian/watch * Bump Standards-Version to 3.9.5 (no changes needed) Checksums-Sha1: d784a52e9de59858c92344a28e7d06e1ee289db0 2115 ruby-nokogiri_1.6.1+ds-1.dsc 14c950cf3ce163d219a04b8311d5f70718e44b9f 233366 ruby-nokogiri_1.6.1+ds.orig.tar.gz 9132d3cfa58fdd0763da376dae75451e0770ac4f 6932 ruby-nokogiri_1.6.1+ds-1.debian.tar.gz 54a970372fa99a61a1b8e768a065ecff6c1c7f52 108132 ruby-nokogiri_1.6.1+ds-1_amd64.deb Checksums-Sha256: 0ec140a1f37cb9c8d3fd52e9f85b00cee33ea45d56a36ea4e0165f53ec1c09b5 2115 ruby-nokogiri_1.6.1+ds-1.dsc dadcf7e80b75621fecee293ba97a0e88d51554751373a6abbbf84cdca3829d92 233366 ruby-nokogiri_1.6.1+ds.orig.tar.gz 12be3209d428759b3b0140e480783990bcb5ea687662520b93b4e01da931f2d4 6932 ruby-nokogiri_1.6.1+ds-1.debian.tar.gz 8adcf94f03be04547e07bdd1ef776f526a3ef5b5ce92e1934bfcca69d63613dc 108132 ruby-nokogiri_1.6.1+ds-1_amd64.deb Files: a3014cd782bcfb05ed93893c5651fc76 2115 ruby optional ruby-nokogiri_1.6.1+ds-1.dsc 89525920b95394be4b30a82ab270f8f8 233366 ruby optional ruby-nokogiri_1.6.1+ds.orig.tar.gz 9b5db4d56f31693df879ca05387f4658 6932 ruby optional ruby-nokogiri_1.6.1+ds-1.debian.tar.gz 00c94366c515e23beee9f9e73e9578eb 108132 ruby optional ruby-nokogiri_1.6.1+ds-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJS0NvqAAoJEKkHZFuPn48JagsP/3qXgJXmLxmk8QKtecBpWLKl syWbPdAs/qRR55QsDAaVRYmQ1Dx0tVVoMS0TGs2zbi/KGypPnntKiyk7RQqjNLYQ PoIghIXmvmhrUMkoVs232nra/QXT/C1ZX7+au6CQC3KIlaE9xwuBydp6ZXz7EXq3 PjdVXV6B7cJzmz3p+HOsWwuDV+8f18XVY3AkvzgzD0/z7K4QBt7iibuyCcDysuKB //EcNtyZBVa1Y1vZwHw88v3szc0Tw/Tbk90zGyscs2kiBuvP5vP8NyUnlnU39YIp lqIfq+jZ0fVVhxSRj6gOo53ON+sVlNV/fsPZm6xRk3UW8b0sHX7Wak4MXah4dnNN VsOOgG29yLhXeU+Z+o34LdFQf3+L2EwvLqAhVhUf1+rYybNJVJxElgVbyQAJGh0F NMFUuJT9Ob+/fZpzcM2tyzioNcV8OSh6t6RDW83+vigFzlVIOYCG/auIbxjvsqxP 4tTrRtOJdTFc4NxFky2FyGwNUJ0J7GcbfpmUVhaMh2+cZ3f4DvGjSjIfYrpYMrxk rMpOP5lraX7gqJFTFdJaWy2CAJ27kbFsXG2FH4ZEyQtDt84H10Lg9xvyUfbUkiv1 Nfng6Da0vNwJ4phgHtJmZ2o0srscYpqVYAI7bs1I9SVHkdwPFGpwhLA4pm7+l0E3 UBam5RTsxaiHEbcdSuCz =3A32 -----END PGP SIGNATURE-----
--- End Message ---
