Your message dated Sat, 29 Mar 2008 12:02:21 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#366410: fixed in tinyproxy 1.6.3-2.1 has caused the Debian Bug report #366410, regarding tinyproxy: format string bug to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [EMAIL PROTECTED] immediately.) -- 366410: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366410 Debian Bug Tracking System Contact [EMAIL PROTECTED] with problems
--- Begin Message ---Package: tinyproxy Severity: normal Tags: patch Below is a fix to a format string bug in tinyproxy. It does not appear exploitable in the current version of tinyproxy. --- log.c.orig 2006-05-08 05:47:26.000000000 -0700 +++ log.c 2006-05-08 05:47:29.000000000 -0700 @@ -217,7 +217,7 @@ continue; #endif - log_message(level, ptr); + log_message(level, "%s", ptr); } vector_delete(log_message_storage);
--- End Message ---
--- Begin Message ---Source: tinyproxy Source-Version: 1.6.3-2.1 We believe that the bug you reported is fixed in the latest version of tinyproxy, which is due to be installed in the Debian FTP archive: tinyproxy_1.6.3-2.1.diff.gz to pool/main/t/tinyproxy/tinyproxy_1.6.3-2.1.diff.gz tinyproxy_1.6.3-2.1.dsc to pool/main/t/tinyproxy/tinyproxy_1.6.3-2.1.dsc tinyproxy_1.6.3-2.1_i386.deb to pool/main/t/tinyproxy/tinyproxy_1.6.3-2.1_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Petter Reinholdtsen <[EMAIL PROTECTED]> (supplier of updated tinyproxy package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 29 Mar 2008 12:32:29 +0100 Source: tinyproxy Binary: tinyproxy Architecture: source i386 Version: 1.6.3-2.1 Distribution: unstable Urgency: low Maintainer: Ed Boraas <[EMAIL PROTECTED]> Changed-By: Petter Reinholdtsen <[EMAIL PROTECTED]> Description: tinyproxy - A lightweight, non-caching, optionally anonymizing http proxy Closes: 366410 466149 Changes: tinyproxy (1.6.3-2.1) unstable; urgency=low . * Non-maintainer upload to solve release goal. * Add LSB dependency header to init.d scripts (Closes: #466149). * Fix format string bug in log.c (Closes: 366410). Patch from Karl Chen. Files: 18c225f0fd0fefc5c9266c6efd25d34d 582 net optional tinyproxy_1.6.3-2.1.dsc 04f0c9e3af3b74b737f4a6d016f32ff8 86882 net optional tinyproxy_1.6.3-2.1.diff.gz b004e91f62d0c17fc853172137378edf 66602 net optional tinyproxy_1.6.3-2.1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFH7itn20zMSyow1ykRAnhlAJoDTl1+u2vK32gNOQ9g+uzgifip3wCeO0eb gZwThSIId2u4kQh0y8hqxiw= =RsIP -----END PGP SIGNATURE-----
--- End Message ---
