Your message dated Thu, 24 Dec 2009 09:50:46 +0000
with message-id <[email protected]>
and subject line Bug#558355: fixed in lucene2 2.9.1+ds1-3~pre1
has caused the Debian Bug report #558355,
regarding lucene2: Please mention that CVE-2007-2383 has been fixed on next
upload
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
558355: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=558355
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: lucene2
Severity: important
Hi
A recent upload of lucene2 fixed #555225; but did not mention that
this fixed CVE-2007-2383. This causes the security tracker to
believe that lucene2 is still affected.
Therefore please mention that CVE-2007-2383 has been fixed in the
changelog on next upload.
Thank you in advance,
~Niels
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.30-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Source: lucene2
Source-Version: 2.9.1+ds1-3~pre1
We believe that the bug you reported is fixed in the latest version of
lucene2, which is due to be installed in the Debian FTP archive:
liblucene2-java-doc_2.9.1+ds1-3~pre1_all.deb
to main/l/lucene2/liblucene2-java-doc_2.9.1+ds1-3~pre1_all.deb
liblucene2-java_2.9.1+ds1-3~pre1_all.deb
to main/l/lucene2/liblucene2-java_2.9.1+ds1-3~pre1_all.deb
lucene2_2.9.1+ds1-3~pre1.diff.gz
to main/l/lucene2/lucene2_2.9.1+ds1-3~pre1.diff.gz
lucene2_2.9.1+ds1-3~pre1.dsc
to main/l/lucene2/lucene2_2.9.1+ds1-3~pre1.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jan-Pascal van Best <[email protected]> (supplier of updated lucene2
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 24 Dec 2009 09:53:01 +0100
Source: lucene2
Binary: liblucene2-java liblucene2-java-doc
Architecture: source all
Version: 2.9.1+ds1-3~pre1
Distribution: experimental
Urgency: low
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Jan-Pascal van Best <[email protected]>
Description:
liblucene2-java - Full-text search engine library for Java(TM)
liblucene2-java-doc - Documentation for Lucene
Closes: 558355
Changes:
lucene2 (2.9.1+ds1-3~pre1) experimental; urgency=low
.
* Mention in this changelog that CVE-2007-2383 has been fixed
(Closes: #558355; Fix CVE-2007-2383)
* First try at providing OSGi metadata in the Manifest for the
core and analysis packages (needed for building Eclipse)
Checksums-Sha1:
dccbaefcf1598105ca4df378d39b248f19d16a4c 1872 lucene2_2.9.1+ds1-3~pre1.dsc
d6b6a3e8b6b909cf3774d401814f57bca4cdbf83 16018 lucene2_2.9.1+ds1-3~pre1.diff.gz
dec7b28f0fe7c1cd320157da5d6447b082fcc631 5842174
liblucene2-java_2.9.1+ds1-3~pre1_all.deb
43d29baf46c952e8691cc9a6573a418014857c64 7295774
liblucene2-java-doc_2.9.1+ds1-3~pre1_all.deb
Checksums-Sha256:
942358f940e72c7d38c63c00b5e09c1b54570aec1191ad38f77dc0b8ce2f0326 1872
lucene2_2.9.1+ds1-3~pre1.dsc
1eba4a81dd0584f27f4020ee823d291b779861ffcc6a4d5ffa927b42bee1263f 16018
lucene2_2.9.1+ds1-3~pre1.diff.gz
34a423c15c5d57a5f2ea365f51657d1de5a8ee0df6725f8de9299fb4caca18c7 5842174
liblucene2-java_2.9.1+ds1-3~pre1_all.deb
5b1a3b9068a29c85d48fbfd30011596b72ed016b47bbaaa42dbdf533da446eec 7295774
liblucene2-java-doc_2.9.1+ds1-3~pre1_all.deb
Files:
0c01e93d8ca6f0babc18cc8439f67810 1872 java optional
lucene2_2.9.1+ds1-3~pre1.dsc
4f8240aba34489384df529856aa1847b 16018 java optional
lucene2_2.9.1+ds1-3~pre1.diff.gz
3cd0e8e7088602b7029c9ee8d21772cd 5842174 java optional
liblucene2-java_2.9.1+ds1-3~pre1_all.deb
438ad53e42b3136a68dd12f912ea4eed 7295774 doc optional
liblucene2-java-doc_2.9.1+ds1-3~pre1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkszML0ACgkQOkyycBqJzCNK+QCeNQOkscxwckLOhsN76PSO+i8e
dbIAoKPXufAYBjle5eQFmU4JNnN/qkTs
=w6yx
-----END PGP SIGNATURE-----
--- End Message ---
