Your message dated Sat, 05 Apr 2014 21:34:09 +0000
with message-id <e1wwye5-0000ll...@franck.debian.org>
and subject line Bug#739229: fixed in arora 0.11.0+qt5+git2014-04-05-1
has caused the Debian Bug report #739229,
regarding arora: Supports insecure SSL ciphers
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
739229: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739229
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: arora
Version: 0.11.0-1
Severity: important
Tags: security

Arora is using insecure SSL ciphers. Please consider disabling following:

TLS_DHE_RSA_WITH_DES_CBC_SHA
TLS_DHE_DSS_WITH_DES_CBC_SHA
TLS_RSA_WITH_DES_CBC_SHA
TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5
TLS_RSA_EXPORT_WITH_RC4_40_MD5

Good checker: https://www.ssllabs.com/ssltest/viewMyClient.html

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.9-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages arora depends on:
ii  libc6           2.17-97
ii  libgcc1         1:4.8.2-15
ii  libqt4-network  4:4.8.5+git209-g718fae5+dfsg-1
ii  libqt4-script   4:4.8.5+git209-g718fae5+dfsg-1
ii  libqt4-sql      4:4.8.5+git209-g718fae5+dfsg-1
ii  libqtcore4      4:4.8.5+git209-g718fae5+dfsg-1
ii  libqtgui4       4:4.8.5+git209-g718fae5+dfsg-1
ii  libqtwebkit4    2.2.1-7
ii  libstdc++6      4.8.2-15

arora recommends no packages.

arora suggests no packages.

-- no debconf information

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
Source: arora
Source-Version: 0.11.0+qt5+git2014-04-05-1

We believe that the bug you reported is fixed in the latest version of
arora, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 739...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sune Vuorela <s...@debian.org> (supplier of updated arora package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 05 Apr 2014 20:59:22 +0200
Source: arora
Binary: arora
Architecture: source amd64
Version: 0.11.0+qt5+git2014-04-05-1
Distribution: unstable
Urgency: low
Maintainer: Sune Vuorela <s...@debian.org>
Changed-By: Sune Vuorela <s...@debian.org>
Description: 
 arora      - simple cross platform web browser
Closes: 668808 736196 739229
Changes: 
 arora (0.11.0+qt5+git2014-04-05-1) unstable; urgency=low
 .
   * New upstream snapshot
     - including jturcotte's Qt5 patchset to give a newer qtwebkit.
     - including a patch by me to limit the used ssl ciphers.
       Closes: #739229
     - Fixes the start page's xml. Closes: #668808
     - Fixes crash in bookmarknode dtor. Closes: #736196
   * Refresh patch.
   * Low urgency because switching to Qt5 is not a small thing.
Checksums-Sha1: 
 10f14a79ea7136f171bb71183be4b340bc23693c 1207 
arora_0.11.0+qt5+git2014-04-05-1.dsc
 5ea0e5c73a19238d03e53171490a0f51c3d7ed9e 677756 
arora_0.11.0+qt5+git2014-04-05.orig.tar.xz
 127162d0a3f43dcea95345c6a6c837d82e0c0612 4068 
arora_0.11.0+qt5+git2014-04-05-1.debian.tar.xz
 0ea85258d8158613f8ab00c9428600273092c359 785914 
arora_0.11.0+qt5+git2014-04-05-1_amd64.deb
Checksums-Sha256: 
 923d75d37ca3a5e0407c6baf13fa7f5e7f7a6609d2c2ee32b80a0c515de14dc9 1207 
arora_0.11.0+qt5+git2014-04-05-1.dsc
 19d2cae7c203e4fa3332819b62f6b26b83e15d3354abc948fd8881e9bdfdfaae 677756 
arora_0.11.0+qt5+git2014-04-05.orig.tar.xz
 09b813018246c3333c9a5907e42c9d361bdaf53847d2857c46f00edb7b31c099 4068 
arora_0.11.0+qt5+git2014-04-05-1.debian.tar.xz
 3a9bfc37e95f4fcd649f96f984f74ed0e90b880365cfd05ae65364def4d70903 785914 
arora_0.11.0+qt5+git2014-04-05-1_amd64.deb
Files: 
 cbc882fdfd0e27dee93360939bef0c78 1207 web extra 
arora_0.11.0+qt5+git2014-04-05-1.dsc
 260c311ea20de0dac7eddec02ad1fda4 677756 web extra 
arora_0.11.0+qt5+git2014-04-05.orig.tar.xz
 6647d94b58bf6f0d63e87740878bfabb 4068 web extra 
arora_0.11.0+qt5+git2014-04-05-1.debian.tar.xz
 d15b7da045f6292f78ee2f1880e9f866 785914 web extra 
arora_0.11.0+qt5+git2014-04-05-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlNAaNwACgkQnMvaFgH6i0r2zgCdHGIb4UIg//uAM9ZJdtNyAIzY
zqEAoIyp73wfvp+MEbjbG9OQp0BISsOl
=Bw9y
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to