Your message dated Sat, 19 Jan 2013 13:32:55 +0000
with message-id <[email protected]>
and subject line Bug#693112: fixed in glusterfs 3.2.7-4
has caused the Debian Bug report #693112,
regarding glusterfs: CVE-2012-4417
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
693112: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693112
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: glusterfs
Severity: important
Tags: security
Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-4417
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: glusterfs
Source-Version: 3.2.7-4
We believe that the bug you reported is fixed in the latest version of
glusterfs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Patrick Matthäi <[email protected]> (supplier of updated glusterfs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 19 Jan 2013 13:53:18 +0100
Source: glusterfs
Binary: glusterfs-client glusterfs-server glusterfs-examples glusterfs-common
glusterfs-dbg
Architecture: source all amd64
Version: 3.2.7-4
Distribution: unstable
Urgency: medium
Maintainer: Patrick Matthäi <[email protected]>
Changed-By: Patrick Matthäi <[email protected]>
Description:
glusterfs-client - clustered file-system (client package)
glusterfs-common - GlusterFS common libraries and translator modules
glusterfs-dbg - GlusterFS debugging symbols
glusterfs-examples - example files for the glusterfs server and client
glusterfs-server - clustered file-system (server package)
Closes: 693112
Changes:
glusterfs (3.2.7-4) unstable; urgency=medium
.
* Add backported upstream patch 04-CVE-2012-4417 to fix CVE-2012-4417:
glusterfs allows local users to overwrite arbitrary files via a symlink
attack on temporary files with predictable names.
Closes: #693112
Checksums-Sha1:
3634bc721d224cdaea21443ef0715c8e4c87c6fc 2224 glusterfs_3.2.7-4.dsc
bcfc2d27ab52725bf830981c642abb26aa4258cd 15968 glusterfs_3.2.7-4.debian.tar.gz
84eac629ff97d1e711f92bca49a8e25e55942d30 384742
glusterfs-examples_3.2.7-4_all.deb
990238d3e2f6e4e21987b2a2447298d917f972f7 385028
glusterfs-client_3.2.7-4_amd64.deb
1a33a78b41a5ca9ff0a40e943218a4e32481326b 442804
glusterfs-server_3.2.7-4_amd64.deb
b0c3f6fb1f6149cff9c98bd892d23cce7161eb16 11007686
glusterfs-common_3.2.7-4_amd64.deb
670c8f827a560165656e381d16b277e24a68b350 5784520
glusterfs-dbg_3.2.7-4_amd64.deb
Checksums-Sha256:
ad0eb18c0273f21f91f853471a95ad2724469af61a04cc65bb5de8a03442765d 2224
glusterfs_3.2.7-4.dsc
1053381f99125cf2d8597c95e3cf624413e9a88e46785affface31380545c694 15968
glusterfs_3.2.7-4.debian.tar.gz
766e0902d3c893f41b3e568b393993d5e26999d22ee2302c65538967d0225975 384742
glusterfs-examples_3.2.7-4_all.deb
1c412a814eca601b9da5ac789e6b7b53a99f37e07660cd03b21266c98f37821a 385028
glusterfs-client_3.2.7-4_amd64.deb
df17557a4a305d6a218b4de6d65988863b4beae6f5d579b789b53976f65fdc65 442804
glusterfs-server_3.2.7-4_amd64.deb
e0c7cdccf7ee3b17b3e92c90f8feca76858f0b6289274ebec773db78b1b9b8b0 11007686
glusterfs-common_3.2.7-4_amd64.deb
723151dff064a7d1d9850c8dea71c2236dccb478be4d5a0efbc6fbe960df5393 5784520
glusterfs-dbg_3.2.7-4_amd64.deb
Files:
972a2336064c41fcdcd230d5f13dcd1f 2224 admin optional glusterfs_3.2.7-4.dsc
bdfbb9c611c22a5f45eb91a678a155ef 15968 admin optional
glusterfs_3.2.7-4.debian.tar.gz
65cacb87d7667a22590a42a462dff7e7 384742 admin optional
glusterfs-examples_3.2.7-4_all.deb
8bc948272dbf5fe1dd778b4d1ae7a4ab 385028 admin optional
glusterfs-client_3.2.7-4_amd64.deb
7090af969fd22fc22ac227154b1638c3 442804 admin optional
glusterfs-server_3.2.7-4_amd64.deb
391620bfb6f0763f9cf2199400abe406 11007686 libs optional
glusterfs-common_3.2.7-4_amd64.deb
638456e38cfbdcb61769b906a68cfd4d 5784520 debug extra
glusterfs-dbg_3.2.7-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=AhOW
-----END PGP SIGNATURE-----
--- End Message ---
