Your message dated Mon, 23 Mar 2015 15:20:14 +0000
with message-id <[email protected]>
and subject line Bug#781018: fixed in glusterfs 3.5.2-2
has caused the Debian Bug report #781018,
regarding glusterfs: CVE-2014-3619
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
781018: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=781018
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: glusterfs
Severity: grave
Tags: security
Justification: user security hole
Hi,
please see https://bugzilla.redhat.com/show_bug.cgi?id=1138145
for further information and patches.
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: glusterfs
Source-Version: 3.5.2-2
We believe that the bug you reported is fixed in the latest version of
glusterfs, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Patrick Matthäi <[email protected]> (supplier of updated glusterfs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 23 Mar 2015 15:35:25 +0100
Source: glusterfs
Binary: glusterfs-client glusterfs-server glusterfs-common glusterfs-dbg
Architecture: source amd64
Version: 3.5.2-2
Distribution: unstable
Urgency: high
Maintainer: Patrick Matthäi <[email protected]>
Changed-By: Patrick Matthäi <[email protected]>
Description:
glusterfs-client - clustered file-system (client package)
glusterfs-common - GlusterFS common libraries and translator modules
glusterfs-dbg - GlusterFS debugging symbols
glusterfs-server - clustered file-system (server package)
Closes: 781018
Changes:
glusterfs (3.5.2-2) unstable; urgency=high
.
* Add patch 01-CVE-2014-3619 to fix a fragment header infinite loop DoS in
glusterfs as described in CVE-2014-3619.
Closes: #781018
Checksums-Sha1:
02c23d4aa9f264bda03480d5091e5b9557b294a8 2198 glusterfs_3.5.2-2.dsc
d92627a5a29f9a7f0b4cf1a091df27b328d0c992 12236 glusterfs_3.5.2-2.debian.tar.xz
60f19cd45525b3a27dd39a978869e2318497d5d0 1913330
glusterfs-client_3.5.2-2_amd64.deb
2fb8c7a491b3862196ae3095601a304218a6141f 1995334
glusterfs-server_3.5.2-2_amd64.deb
1896966adde332657c485ba78d06bf5265b95501 3833060
glusterfs-common_3.5.2-2_amd64.deb
6431e148a06222424dcf712651f674c87a044947 8638210
glusterfs-dbg_3.5.2-2_amd64.deb
Checksums-Sha256:
8815a72ea85582246e4fbb7e74529daefe885e155c7a7280a7e57623eab39a04 2198
glusterfs_3.5.2-2.dsc
7723e46cbd970ec0736fd4e77697a5b7150411eee808c0078e69496ad50c6b2e 12236
glusterfs_3.5.2-2.debian.tar.xz
4ffdec3b91bac7df31dff7f683a3c31fbfb5c47233e113d02603290e881d3dbe 1913330
glusterfs-client_3.5.2-2_amd64.deb
84babef2a09ff8da2961efa9b1771b7774d6e982deb624aeef36d4d16eab8f7c 1995334
glusterfs-server_3.5.2-2_amd64.deb
7b1025f4e32daad512aa2751e2a18525efb690bd997eee28e044766f0ef1c041 3833060
glusterfs-common_3.5.2-2_amd64.deb
af9a6957ab8d2a1714729ce4aef3f09569eed2e768b6ea4688c5f59855f7f8bd 8638210
glusterfs-dbg_3.5.2-2_amd64.deb
Files:
f400fa0b249794af36c78b8150295426 2198 admin optional glusterfs_3.5.2-2.dsc
ec21f7c287175e3aaa3faf9ee5bde3cc 12236 admin optional
glusterfs_3.5.2-2.debian.tar.xz
7d1db0637716115a2fb9a2e12c99c79f 1913330 admin optional
glusterfs-client_3.5.2-2_amd64.deb
4a09c0bb4049d574f9c10a843224e4de 1995334 admin optional
glusterfs-server_3.5.2-2_amd64.deb
8bfe783a79f35bdefdf31b4c2f437596 3833060 libs optional
glusterfs-common_3.5.2-2_amd64.deb
ba8b3a6811636731df3a49beffd116f5 8638210 debug extra
glusterfs-dbg_3.5.2-2_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=UvQA
-----END PGP SIGNATURE-----
--- End Message ---
