Your message dated Fri, 29 Jun 2012 21:20:15 +0000
with message-id <e1skibv-00021p...@franck.debian.org>
and subject line Bug#674448: fixed in libcommons-compress-java 1.4.1-1
has caused the Debian Bug report #674448,
regarding CVE-2012-2098
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
674448: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674448
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libcommons-compress-java
Version: 1.2-1
Severity: grave
Tags: security
Please see https://commons.apache.org/compress/security.html
Fixed in 1.4.1. This doesn't warrant a DSA, but you could fix
it through a point update for Squeeze 6.0.6.
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: libcommons-compress-java
Source-Version: 1.4.1-1
We believe that the bug you reported is fixed in the latest version of
libcommons-compress-java, which is due to be installed in the Debian FTP
archive:
libcommons-compress-java_1.4.1-1.debian.tar.gz
to
main/libc/libcommons-compress-java/libcommons-compress-java_1.4.1-1.debian.tar.gz
libcommons-compress-java_1.4.1-1.dsc
to main/libc/libcommons-compress-java/libcommons-compress-java_1.4.1-1.dsc
libcommons-compress-java_1.4.1-1_all.deb
to main/libc/libcommons-compress-java/libcommons-compress-java_1.4.1-1_all.deb
libcommons-compress-java_1.4.1.orig.tar.gz
to
main/libc/libcommons-compress-java/libcommons-compress-java_1.4.1.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 674...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Miguel Landaeta <mig...@miguel.cc> (supplier of updated
libcommons-compress-java package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sun, 17 Jun 2012 18:08:36 -0430
Source: libcommons-compress-java
Binary: libcommons-compress-java
Architecture: source all
Version: 1.4.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Miguel Landaeta <mig...@miguel.cc>
Description:
libcommons-compress-java - Java API for working with tar, zip and bzip2 files
Closes: 674448
Changes:
libcommons-compress-java (1.4.1-1) unstable; urgency=medium
.
* Team upload.
* New upstream release. CVE-2012-2098 is fixed. (Closes: #674448).
* Replace B-D on junit with junit4.
* Add B-D on libxz-java.
* Fix clean target to allow twice in a row builds.
Checksums-Sha1:
b857e142fdcdc716d816c772ed696f5f50f0e578 2162
libcommons-compress-java_1.4.1-1.dsc
9e9542ba94351ad410dcd0fea1ceaf265f54f81c 3228776
libcommons-compress-java_1.4.1.orig.tar.gz
82de52fc0c32dadc628941f7b7c285067db69290 3018
libcommons-compress-java_1.4.1-1.debian.tar.gz
ecfe0a9febc00da38c04c032963e6ca98bb3f36a 224098
libcommons-compress-java_1.4.1-1_all.deb
Checksums-Sha256:
b50bd9daa0fa0ab871d7097c9b3c7fe514953c607efad9f23bd89381f6213c54 2162
libcommons-compress-java_1.4.1-1.dsc
b4f34aa03df917b785479e147381eea86c5c17e9067ddf8c27301ff6cd0aa91c 3228776
libcommons-compress-java_1.4.1.orig.tar.gz
4e8addfd04a4ea631e835b05248a036fc8fb29de482e1b8bb60e34331a3f4a91 3018
libcommons-compress-java_1.4.1-1.debian.tar.gz
f49ccf8488c9a14ba68d2f103db5b390c908caadebcbb354492bbcad5ee27415 224098
libcommons-compress-java_1.4.1-1_all.deb
Files:
ff3e615d448e8da031a03e431433c9d1 2162 java optional
libcommons-compress-java_1.4.1-1.dsc
f26e9d94dd83976d76dfa5e1052abb49 3228776 java optional
libcommons-compress-java_1.4.1.orig.tar.gz
002444c53a511a65678557504cf630ae 3018 java optional
libcommons-compress-java_1.4.1-1.debian.tar.gz
fd16669272e1ed38f51f96ffb06fa7a5 224098 java optional
libcommons-compress-java_1.4.1-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)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=5nru
-----END PGP SIGNATURE-----
--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
debian-j...@lists.debian.org for discussions and questions.
