Your message dated Fri, 22 Apr 2005 14:47:48 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#229673: fixed in chkrootkit 0.45-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 25 Jan 2004 23:22:14 +0000
>From [EMAIL PROTECTED] Sun Jan 25 15:22:14 2004
Return-path: <[EMAIL PROTECTED]>
Received: from chiark.greenend.org.uk [193.201.200.170] (mail)
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1Akta1-0006nX-00; Sun, 25 Jan 2004 15:22:14 -0800
Received: from [192.168.37.2] (helo=slappy.cattery.greenend.org.uk ident=mail)
        by chiark.greenend.org.uk (Debian Exim 3.35 #1) with esmtp
        for [EMAIL PROTECTED]
        id 1Akta0-00066l-00; Sun, 25 Jan 2004 23:22:12 +0000
Received: from christi by slappy.cattery.greenend.org.uk with local (Exim 3.35 
#1 (Debian))
        id 1AktZx-0003AW-00; Sun, 25 Jan 2004 23:22:09 +0000
From: Christi Alice Scarborough <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: chkrootkit: false positive - freeradius package causes a false 
positive for slapper rootkit
X-Mailer: reportbug 1.50
Date: Sun, 25 Jan 2004 23:22:09 +0000
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_01_25 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-5.0 required=4.0 tests=HAS_PACKAGE autolearn=no 
        version=2.60-bugs.debian.org_2004_01_25
X-Spam-Level: 

Package: chkrootkit
Version: 0.42-1.backports.org.1
Severity: important

Test for slapper is:

netstat -an | /bin/egrep '0.0:2002 0.0|:4156 0.0|:1978 |0.0:1812 |0.0:2015 '

>From /etc/services:

radius          1812/udp                        # Radius

Hence a false positive is reported.

Removing the freeradius package causes this detection to go away.

Thanks,

Christi


-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux slappy 2.4.24-mh2 #1 SMP Sat Jan 17 01:19:48 GMT 2004 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages chkrootkit depends on:
ii  binutils                   2.12.90.0.1-4 The GNU assembler, linker and bina
ii  libc6                      2.2.5-11.5    GNU C Library: Shared libraries an


---------------------------------------
Received: (at 229673-close) by bugs.debian.org; 22 Apr 2005 18:54:17 +0000
>From [EMAIL PROTECTED] Fri Apr 22 11:54:17 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1DP3I8-0002cW-00; Fri, 22 Apr 2005 11:54:16 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
        id 1DP3Bs-0002oz-00; Fri, 22 Apr 2005 14:47:48 -0400
From: lantz moore <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#229673: fixed in chkrootkit 0.45-1
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Fri, 22 Apr 2005 14:47:48 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 
X-CrossAssassin-Score: 11

Source: chkrootkit
Source-Version: 0.45-1

We believe that the bug you reported is fixed in the latest version of
chkrootkit, which is due to be installed in the Debian FTP archive:

chkrootkit_0.45-1.diff.gz
  to pool/main/c/chkrootkit/chkrootkit_0.45-1.diff.gz
chkrootkit_0.45-1.dsc
  to pool/main/c/chkrootkit/chkrootkit_0.45-1.dsc
chkrootkit_0.45-1_i386.deb
  to pool/main/c/chkrootkit/chkrootkit_0.45-1_i386.deb
chkrootkit_0.45.orig.tar.gz
  to pool/main/c/chkrootkit/chkrootkit_0.45.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
lantz moore <[EMAIL PROTECTED]> (supplier of updated chkrootkit package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 21 Apr 2005 17:28:26 -0700
Source: chkrootkit
Binary: chkrootkit
Architecture: source i386
Version: 0.45-1
Distribution: unstable
Urgency: low
Maintainer: lantz moore <[EMAIL PROTECTED]>
Changed-By: lantz moore <[EMAIL PROTECTED]>
Description: 
 chkrootkit - Checks for signs of rootkits on the local system
Closes: 192438 223428 229673 234566 262586 286041 286057 286473 286735 286870 
287062 287109 287755 289647 290690 290816 291494 291754 294775 295889 298394 
300217 304561 305708 305710
Changes: 
 chkrootkit (0.45-1) unstable; urgency=low
 .
   * New upstream release (closes: 305708, 305710)
   * use -f for conf file test (closes: 289647)
   * added debconf translations
     (closes: 294775,291754,287755,286473,286041)
   * added more false positives to README.Debian:
       - blackdown java (closes: 286870, 290816)
       - blender (closes: 287062)
       - mldonkey-server (closes: 304561, 295889)
       - twiki (closes: 298394)
       - viewglob, kaffe (closes: 287109,286057)
       - bitlbee (closes: 234566)
       - tiger (closes: 223428)
       - radius (closes: 192438,229673)
   * only run chkrootkit from cron.daily if the package is still installed
     (closes: 300217,291494)
   * disabled chkutmp as it seems unstable
   * getCMD now only runs test if ps shows the prog as running
     (closes: 262586)
   * added ability for the daily run to only report problems if they differ
     from the previous days run (closes: 290690,286735)
   * removed an invalid changelog entry
Files: 
 31fa5f81899a56ca8a98f2eced5f437e 602 misc optional chkrootkit_0.45-1.dsc
 b5b1275dee28023d636daf93e4b6de73 35841 misc optional 
chkrootkit_0.45.orig.tar.gz
 f42e2030ba1ed8b8171331ccf8892d92 13309 misc optional chkrootkit_0.45-1.diff.gz
 280b68a5352ba11fd1a79d5ab017eee2 234064 misc optional 
chkrootkit_0.45-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCaE0jNFhjq9qkdRERAi+EAKCJwd+kmTW8yTWu6i+QTwLhcYBKhgCeLP8J
pr5N7d8dtpB+DcHWuQ/WPIY=
=96Ks
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to