Your message dated Tue, 23 Jul 2019 20:48:02 +0000
with message-id <e1hq1ha-000h0d...@fasolo.debian.org>
and subject line Bug#931932: fixed in ruby-mini-magick 4.9.2-1.1
has caused the Debian Bug report #931932,
regarding CVE-2019-13574
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
931932: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931932
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: ruby-mini-magick
Severity: grave
Tags: security
Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13574
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: ruby-mini-magick
Source-Version: 4.9.2-1.1
We believe that the bug you reported is fixed in the latest version of
ruby-mini-magick, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 931...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Salvatore Bonaccorso <car...@debian.org> (supplier of updated ruby-mini-magick
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 13 Jul 2019 21:51:59 +0200
Source: ruby-mini-magick
Architecture: source
Version: 4.9.2-1.1
Distribution: unstable
Urgency: high
Maintainer: Debian Ruby Extras Maintainers
<pkg-ruby-extras-maintain...@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Closes: 931932
Changes:
ruby-mini-magick (4.9.2-1.1) unstable; urgency=high
.
* Non-maintainer upload.
* Don't allow remote shell execution (CVE-2019-13574) (Closes: #931932)
Checksums-Sha1:
60e7666502bdf1bbfb2cc52ac856d50838a7711b 2395 ruby-mini-magick_4.9.2-1.1.dsc
dcce641d62e7554933595efc2691ca4a98d3210e 5972
ruby-mini-magick_4.9.2-1.1.debian.tar.xz
b07b5e74ee75bfba7cf2aadc83793f1ba80a9cd1 7270
ruby-mini-magick_4.9.2-1.1_source.buildinfo
Checksums-Sha256:
d6673f687e334c022f29571e2019908243927fa12d144e387b951af50b8171a5 2395
ruby-mini-magick_4.9.2-1.1.dsc
0dd8d2ae0b91bb1ca04d567ace60b2e352f8ed15246812c82147f0803e920384 5972
ruby-mini-magick_4.9.2-1.1.debian.tar.xz
9c4e4642b2b30dfe07da7321e47582f8bd3023cb9919b2bd2af43d92f210d14c 7270
ruby-mini-magick_4.9.2-1.1_source.buildinfo
Files:
655bf85b0935a1412078f8fcaf8a8d9d 2395 ruby optional
ruby-mini-magick_4.9.2-1.1.dsc
b1b41629a27110622795bf049e871cee 5972 ruby optional
ruby-mini-magick_4.9.2-1.1.debian.tar.xz
256390e9cdc1e7bc7c1b48693d8395ab 7270 ruby optional
ruby-mini-magick_4.9.2-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=7paR
-----END PGP SIGNATURE-----
--- End Message ---
