Your message dated Wed, 18 Nov 2015 01:16:52 +0100
with message-id <564bc374.5060...@debian.org>
and subject line Re: cabextract, evolution-ews, msn-pecan, clamav, calibre:
Embedded code copies of libmspack
has caused the Debian Bug report #675556,
regarding Embedded code copies of libmspack
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
675556: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=675556
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: cabextract,evolution-ews,msn-pecan,clamav,calibre
Severity: normal
Tags: security
Hi,
the following packages include embedded copies of libmspack:
- cabextract can use the external libmspack, but it is not packaged in
Debian.
- evolution-ews includes a modified version of an older libmspack.
- msn-pecan includes a complete copy of an older libmspack, it could
probably be made to use it instead.
- clamav embeds a modified version of an older libmspack.
- calibre embeds a complete copy of an older libmspack, it could
probably be made to use an external one instead.
There may be other packages impacted. For example I found traces of it
in older versions of spamassassin and OOo. I have not conducted a
thorough check of the archive.
This report is here to track the issue and inform the security team of
its existence. If we want it fixed, someone needs to step up and package
libmspack so that other packages can use it instead of embedding.
Cheers,
--
.''`. Josselin Mouette
: :' :
`. `'
`-
--- End Message ---
--- Begin Message ---
Version: 3.18.0-1
On Sat, 12 Nov 2011 13:27:04 +0100 Josselin Mouette <j...@debian.org> wrote:
> Package: cabextract,evolution-ews,msn-pecan,clamav,calibre
> Severity: normal
> Tags: security
>
> Hi,
>
> the following packages include embedded copies of libmspack:
> - cabextract can use the external libmspack, but it is not packaged in
> Debian.
> - evolution-ews includes a modified version of an older libmspack.
Recent versions link against the system libmspack. So I'm closing this
bug report.
--
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?
signature.asc
Description: OpenPGP digital signature
--- End Message ---
_______________________________________________
Pkg-evolution-maintainers mailing list
Pkg-evolution-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-evolution-maintainers
