Your message dated Sat, 16 Dec 2017 16:20:34 +0000 with message-id <e1eqfcu-0007lq...@fasolo.debian.org> and subject line Bug#884525: fixed in mobyle 1.5.5+dfsg-4 has caused the Debian Bug report #884525, regarding mobyle: Mobyle javascript includes Google analytics beacon to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 884525: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884525 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message --------BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Source: mobyle Version: 1.5.5 Severity: grave Tags: upstream security Justification: user security hole In file Src/Portal/htdocs/MobylePortal/js/mobyle_ga.js, there is a Google analytics beacon prepared to "phone home": I don't think this should be part of a Debian package by default. - -- System Information: Debian Release: 9.2 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlo08/EACgkQBcgs9XrR2kb+LQCdGxgHG4M68aekParzcogEFUST U9gAn2vYBZFC5g1dHOj0+BuwVvjrlTmr =iVQS -----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---Source: mobyle Source-Version: 1.5.5+dfsg-4 We believe that the bug you reported is fixed in the latest version of mobyle, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 884...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Andreas Tille <ti...@debian.org> (supplier of updated mobyle package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 16 Dec 2017 16:44:03 +0100 Source: mobyle Binary: mobyle mobyle-utils Architecture: source Version: 1.5.5+dfsg-4 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team <debian-med-packag...@lists.alioth.debian.org> Changed-By: Andreas Tille <ti...@debian.org> Description: mobyle - Web portal that provides web forms for command-line software mobyle-utils - binary tools used by Mobyle Closes: 884525 Changes: mobyle (1.5.5+dfsg-4) unstable; urgency=medium . * Remove Google Analytics beacon. Closes: #884525 * Standards-Version: 4.1.2 Checksums-Sha1: 3d62c621fcf6a489b56da7e4b6051823f5e09bc9 2179 mobyle_1.5.5+dfsg-4.dsc bac36562704665d9452b04fb2be18f1f57888fcc 15388 mobyle_1.5.5+dfsg-4.debian.tar.xz 85348f83acbc4952d3598c785d4573f3e8eb7d52 14028 mobyle_1.5.5+dfsg-4_source.buildinfo Checksums-Sha256: 5ecf17eeb0c7bed76743c0ff5fe23b5a6440f163498e6a650251f8894482bba4 2179 mobyle_1.5.5+dfsg-4.dsc 2efb49168a1985dc1debfd5d0bc64373b1cf0383026d8f38c041cfec361bba0d 15388 mobyle_1.5.5+dfsg-4.debian.tar.xz 641e4e59e7241d5cef642624abff5a45474c11638a9140d2e509c72b81bcfb47 14028 mobyle_1.5.5+dfsg-4_source.buildinfo Files: d15414a989c95cae4b3ca415ff71fe6d 2179 science optional mobyle_1.5.5+dfsg-4.dsc edea09579d51af9676f305c1c25f6394 15388 science optional mobyle_1.5.5+dfsg-4.debian.tar.xz ff8f6ba77d0ad51698a9d5784f6b14bb 14028 science optional mobyle_1.5.5+dfsg-4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJCBAEBCAAsFiEE8fAHMgoDVUHwpmPKV4oElNHGRtEFAlo1QqMOHHRpbGxlYUBy a2kuZGUACgkQV4oElNHGRtHMgA/+LSosb/Ws8CN9UAbsvhwryr3xFT4IWF2ktcBl RSz10NwZLB6/USxpkUsAxFsoZw6qOROerDoAj2i8L8HL1SmvMZB9rKURcE7i8LHq 4YqDQ/XsqUQxHtgGJzk4wzdNRd8Pk7Gggjpv3lHJVgyzjkiMYFqV0T1IUCqBq9D0 36NbHKLbTyDpX3FvEm2ZkEJvaVzwhUTFoUPU1OH+nC/I0dReu2xNq3v5x8VTrvMP aKECsBz0OTzGOClQwlsJI3KLsMeVQSuSYWvzCoowiwdrrGQ4wz/Vd4btZirVo44R cQqTHfaWxZBw6T/o5Y1kP+COl86AoWjGoHta/qDVhqkyEF/NJFGB7bdpLgr3/UxU 4mDxD9Av6QM6T0GlU6BTKzWUjZ8CMtxAh4HBqXq4+6w/l+HrtZu8QL0r4Y3GYlax ygIj2X5cO+1emOG6u35Mvp/6O5B7cxFKx1mTss2Bp2ViqHPAbcDTdPipUd4ows96 t+LjtoximHxvD4mnWAJewgC55SHT8koJmQ7nVQgOa+gRXg4LsdC48Ww27Zdv9J/f aNNSDAdd12PPsn1Cvz10yfy2MC2rUD4GUOjDgujXH5iZZ5U2viY7DpPAz+tidq3Y e6aefTFIirUCm3D39WEXqi5COlIaJfk9rr8cnRdUDOa7PDAYO2xY+ZL5Kw2ujU7w 2ZJSdDs= =DHXJ -----END PGP SIGNATURE-----
--- End Message ---
