Your message dated Fri, 29 Jul 2005 09:34:08 +0200
with message-id <[EMAIL PROTECTED]>
and subject line 310827 done
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--------------------------------------
Received: (at submit) by bugs.debian.org; 26 May 2005 09:15:38 +0000
>From [EMAIL PROTECTED] Thu May 26 02:15:38 2005
Return-path: <[EMAIL PROTECTED]>
Received: from box79162.elkhouse.de [213.9.79.162] 
        by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
        id 1DbESo-0007Q9-00; Thu, 26 May 2005 02:15:38 -0700
Received: from martin by box79162.elkhouse.de with local (Exim 4.50)
        id 1DbESJ-00053i-Jn
        for [EMAIL PROTECTED]; Thu, 26 May 2005 11:15:07 +0200
Date: Thu, 26 May 2005 11:15:07 +0200
From: Martin Pitt <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: CAN-2005-1290: Multiple cross-site scripting vulnerability
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
        protocol="application/pgp-signature"; boundary="XsQoSWH+UP9D9v3l"
Content-Disposition: inline
X-Reportbug-Version: 3.8
User-Agent: Mutt/1.5.9i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level: 


--XsQoSWH+UP9D9v3l
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Package: phpbb2
Version: 2.0.13+1-6
Severity: important
Tags: security

Hi!

phpbb2's changelog does not make it clear whether the three issues
mentioned in

  http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCAN-2005-1290

are already fixed. Can you please check this? If they are still
present, please upgrade the bug severity. If not, can you please add
the CAN number to the changelog on next upload? (Please also add
CAN-2005-1193, which already seems fixed).

Thanks,

Martin


-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.9
Locale: LANG=3Dde_DE.UTF-8, LC_CTYPE=3Dde_DE.UTF-8 (charmap=3DUTF-8)

--=20
Martin Pitt              http://www.piware.de
Ubuntu Developer   http://www.ubuntulinux.org
Debian Developer        http://www.debian.org

--XsQoSWH+UP9D9v3l
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFClZObDecnbV4Fd/IRAlrHAKCvBamVL1j7F3YRQHQjzEyEzemkRgCgwivu
RumRKfM+w7rH5t7H09UefJE=
=RP7/
-----END PGP SIGNATURE-----

--XsQoSWH+UP9D9v3l--

---------------------------------------
Received: (at 310827-done) by bugs.debian.org; 29 Jul 2005 07:34:48 +0000
>From [EMAIL PROTECTED] Fri Jul 29 00:34:48 2005
Return-path: <[EMAIL PROTECTED]>
Received: from mail.azu.nl (davis.azu.nl) [143.121.237.50] 
        by spohr.debian.org with esmtp (Exim 3.36 1 (Debian))
        id 1DyPOK-0006KZ-00; Fri, 29 Jul 2005 00:34:48 -0700
Received: from coltrane.azu.nl (coltrane.azu.nl [143.121.16.65])
        by davis.azu.nl (Postfix) with ESMTP id 2823340E8
        for <[EMAIL PROTECTED]>; Fri, 29 Jul 2005 09:34:15 +0200 (MEST)
Received: from isiwww.rrn.azu.nl (unknown [143.121.62.57])
        by coltrane.azu.nl (Postfix) with ESMTP id 5BA74114F
        for <[EMAIL PROTECTED]>; Fri, 29 Jul 2005 09:34:15 +0200 (MEST)
Received: from [143.121.153.52] (zoltrix.rrn.azu.nl [143.121.153.52])
        by isiwww.rrn.azu.nl (Postfix) with ESMTP id 11D181B82A
        for <[EMAIL PROTECTED]>; Fri, 29 Jul 2005 09:29:24 +0200 (CEST)
Message-ID: <[EMAIL PROTECTED]>
Date: Fri, 29 Jul 2005 09:34:08 +0200
From: Thijs Kinkhorst <[EMAIL PROTECTED]>
Organization: University Medical Center, Utrecht NL
User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: 310827 done
X-Enigmail-Version: 0.92.0.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature";
 boundary="------------enig6F32584A346287B836B7B3F6"
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
        (1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-2.0 required=4.0 tests=BAYES_00,SPAMBUGNUMSUBJ 
        autolearn=no version=2.60-bugs.debian.org_2005_01_02

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig6F32584A346287B836B7B3F6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Version: 2.0.13+1-6sarge1

We've mentioned the CVE-id's in the changelog with the recent security
upload to sarge, etch and sid.


Thijs

--------------enig6F32584A346287B836B7B3F6
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)

iD8DBQFC6dv0JdKMxZV9WM8RAgt4AKCovacM8tokIOuREnBNsaPjQ+EtXgCfWOgx
xO/XwLhcyQ5DmrH3hf5fY+k=
=Ttfb
-----END PGP SIGNATURE-----

--------------enig6F32584A346287B836B7B3F6--


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to