Your message dated Wed, 03 May 2017 10:03:30 +0000 with message-id <e1d5r86-0009yk...@fasolo.debian.org> and subject line Bug#856592: fixed in libpodofo 0.9.4-5 has caused the Debian Bug report #856592, regarding Multiple security issues to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 856592: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856592 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: libpodofo Severity: grave Tags: security New podofo issues (no CVEs yet): http://www.openwall.com/lists/oss-security/2017/03/02/10 http://www.openwall.com/lists/oss-security/2017/03/02/9 http://www.openwall.com/lists/oss-security/2017/03/02/8 http://www.openwall.com/lists/oss-security/2017/03/02/7 http://www.openwall.com/lists/oss-security/2017/03/02/6 http://www.openwall.com/lists/oss-security/2017/03/02/5 http://www.openwall.com/lists/oss-security/2017/03/02/4 http://www.openwall.com/lists/oss-security/2017/03/02/3 http://www.openwall.com/lists/oss-security/2017/03/02/2 Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: libpodofo Source-Version: 0.9.4-5 We believe that the bug you reported is fixed in the latest version of libpodofo, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 856...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Mattia Rizzolo <mat...@debian.org> (supplier of updated libpodofo package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 03 May 2017 11:41:19 +0200 Source: libpodofo Binary: libpodofo-dev libpodofo-utils libpodofo0.9.4 Architecture: source Version: 0.9.4-5 Distribution: unstable Urgency: high Maintainer: Mattia Rizzolo <mat...@debian.org> Changed-By: Mattia Rizzolo <mat...@debian.org> Description: libpodofo-dev - PoDoFo development files libpodofo-utils - PoDoFo utilities libpodofo0.9.4 - PoDoFo - library to work with the PDF file format Closes: 854601 854602 854604 856592 859331 Changes: libpodofo (0.9.4-5) unstable; urgency=high . * Add upstream patch for security issues: + CVE-2017-5853 Closes: #854601 + CVE-2017-6844 Closes: #856592 + CVE-2017-5854 Closes: #854602 + CVE-2017-5886 Closes: #854604 + CVE-2017-7379 Closes: #859331 Checksums-Sha1: efa896f42140fd0ac2e5cc36014a339cab5dad29 2119 libpodofo_0.9.4-5.dsc 6238655d640b0738601fd4f35fafd4f39d4ae60a 13308 libpodofo_0.9.4-5.debian.tar.xz c0a2be46333e68a33bb4ccf60639480aadca9d9d 8325 libpodofo_0.9.4-5_amd64.buildinfo Checksums-Sha256: 60de0684a1a38fff67e1c49bf49f55aec41167eb2cb5c3a4034cc4de063944ef 2119 libpodofo_0.9.4-5.dsc fc150e0534bf808588350c8c6d82bec033481a7039dfbd28742033cc8eddc455 13308 libpodofo_0.9.4-5.debian.tar.xz 14ded71340b21dad144d906c0d58e34f7e6416de7abc2c913195fbb099614f08 8325 libpodofo_0.9.4-5_amd64.buildinfo Files: 7f3a7c904e54eeb655044c8adb56d902 2119 libdevel extra libpodofo_0.9.4-5.dsc a8a35d56d295eab92b7356bfcc378ea7 13308 libdevel extra libpodofo_0.9.4-5.debian.tar.xz 742c1b148d7356cc3c18eeb9f1fd6f4d 8325 libdevel extra libpodofo_0.9.4-5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAlkJpsgACgkQCBa54Yx2 K628GQ//dXA9Zo8CS2DoRRBRc3awfFH5WhMiU5urTB3fBWnpmSk28gSS7znHhAZQ C5QJl9CSK2AHuU2lnYiIilCzWeJZD9gA5VOKNHqiSUnKUDrvgM/xIr3OHoXcl4ti t5oEODgxFnSu1W5WEwR8ocSbC6oEt50CSGpa2ZFFSWYCGOxeiGjZblwvlsR1Fgh/ s/Yx4wUJ8HXjHhV9BuXlvh733QJ4SLuS0AR/gjykxQo1LdgcenP1VbrQANrvr/b1 mJMFwOhbc6DHdZ9KZbNuN+DZwAPUW1mpg6hJoj1HbfjHr0HV0pu2xHJxs41YIDwM k5Ir5E/cq5H3tj/cqfW9VMedu4fPBYLqYtR+UDfSv1FJwuFZAhEq6RPaaXbeyRRg GNRrkH6DCrKgebixct6MxcWXnN32BaSmaUg+HOgAQ06ei9z2YwB03CiSEL3mK0Dd HX4XjBHZ3V/OUkOv9KlMYpyWwaVoM6E8TdCZZR4Zd5BHVnAQt7YbsQtGgaT5ZVdc mR1hHvEPaYfaFjGgX/ifObeTsGwTu22IO/7ywIRHDh6j/OIjGoMlqTAechzqo20f CeI/ksJMNJjD9LDrd9LoV2dLx1kbpurBfbTaz4aNKxH0zl1yK/Tk+4m7OgCt0RrW e1i4KO/XOiM8cIpQtOqJjG/jNKnZGxCLKKZV8JuV9JNSiDCTThk= =DN+/ -----END PGP SIGNATURE-----
--- End Message ---
