Your message dated Mon, 23 Jan 2017 22:48:45 +0000
with message-id <[email protected]>
and subject line Bug#703138: fixed in davical 1.1.5-1
has caused the Debian Bug report #703138,
regarding davical: logout doesn't work when a LSID cookie is there
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
703138: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703138
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: davical
Version: 1.1.1-1
Severity: important
Tags: security upstream
Hi.
When one logs on the the admin pages using the "forget me not"
checkbox (which actually creates a LSID, aka long term session ID,
cookie) the logout button doesn't work anymore as expected.
As soon as one goes to a valid URI within the admin pages
(I think the CalDAV URI space should not be affected) one is
logged on immediately... and more "normal" sid cookies are generated.
IMHO, when the logout button is clicked, one should expect that
all LSID and SID cookies are removed immediately.
Marking this as security relevant, as the user may not see that the
logout didn't work.
Cheers,
Chris.
--- End Message ---
--- Begin Message ---
Source: davical
Source-Version: 1.1.5-1
We believe that the bug you reported is fixed in the latest version of
davical, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Florian Schlichting <[email protected]> (supplier of updated davical package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 23 Jan 2017 23:04:30 +0100
Source: davical
Binary: davical davical-doc
Architecture: source all
Version: 1.1.5-1
Distribution: unstable
Urgency: medium
Maintainer: Davical Development Team <[email protected]>
Changed-By: Florian Schlichting <[email protected]>
Description:
davical - PHP CalDAV and CardDAV Server
davical-doc - PHP CalDAV and CardDAV Server - technical documentation
Closes: 703130 703138 703342
Changes:
davical (1.1.5-1) unstable; urgency=medium
.
* New upstream release (closes: #703130, #703138, #703342)
* Separate rebuild-translations and building locale/*po files. This should
make davical builds reproducible.
* Ship davical-cli in /usr/share/davical/scripts
* Use secure URIs where possible
* Bump years on debian/copyright
* Bump dependency on libawl-php to 0.57
* Make extra sure that the orig-source tarball does not contain any cruft
* Install example configs as /etc/davical/config.php and
/etc/apache2/sites-available/davical.conf
* Use jdupes to remove duplicate files in davical-doc
* Mark davical-doc "Multi-Arch: foreign" as suggested by the Multiarch
hinter
* Override erroneous lintian errors
Checksums-Sha1:
8b5b2c09463120f0cc6e67cde6aabd73d9500a19 2076 davical_1.1.5-1.dsc
357706817c857d8ab8216254a5458e1535d775b1 1319316 davical_1.1.5.orig.tar.xz
98c6fe7cc17ad13cdb057f06fb6398fd99999f55 12228 davical_1.1.5-1.debian.tar.xz
0adbfe2750ba72858bdd3577f8db92e2978ce8ff 1169006 davical-doc_1.1.5-1_all.deb
f94ce532b5144edd8a43f36789727247aef44ff9 391924 davical_1.1.5-1_all.deb
b106541b44efd8cfd39a06829c5e93b7dce76ad3 6553 davical_1.1.5-1_amd64.buildinfo
Checksums-Sha256:
d120f820b24c301f20456aeb276d7d3e3fec39ddf1dfb88d19bb4655ff402d61 2076
davical_1.1.5-1.dsc
667583fb345612b8c9bd67ebfc1ef5e154fb5494a75d67ec347842c1257f238f 1319316
davical_1.1.5.orig.tar.xz
02f70ee7d7e4409c82743551697f0995f1eaa346c1845b3d80bf38ce3b2ca840 12228
davical_1.1.5-1.debian.tar.xz
3559accddbc9b897e9a8e4e9ba289ac08ba15eb1efa5820c2a0f912a34fc58df 1169006
davical-doc_1.1.5-1_all.deb
ff3787676d329ae390cc31aff5bbdc2b3d77627807b01509c00687e1efe6ed11 391924
davical_1.1.5-1_all.deb
559fc050f77d48ebc32a46e25e99f38e06ff11dad27ad0afe7539a8a7157eb38 6553
davical_1.1.5-1_amd64.buildinfo
Files:
09aa6cd95a843dceee2f77a87c338895 2076 web extra davical_1.1.5-1.dsc
7ad2418159cb205457db16326116bef0 1319316 web extra davical_1.1.5.orig.tar.xz
ea1e388e5b1070920ed8eb4e5fe815a7 12228 web extra davical_1.1.5-1.debian.tar.xz
c5abf739c85b93b5a421f9ffdf9d7834 1169006 doc extra davical-doc_1.1.5-1_all.deb
fb76a90418d4d6603f329c349246b360 391924 web extra davical_1.1.5-1_all.deb
92480b1a93d239b1f281f0d05ba247a8 6553 web extra davical_1.1.5-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=WhGp
-----END PGP SIGNATURE-----
--- End Message ---
