Your message dated Thu, 30 Mar 2017 19:47:46 +0000
with message-id <[email protected]>
and subject line Bug#857342: fixed in tnef 1.4.9-1+deb8u2
has caused the Debian Bug report #857342,
regarding tnef: thef in version 1.4.9-1+deb8u1 is unable to extract from 
winmail.dat
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
857342: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857342
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tnef

Version: 1.4.9-1+deb8u1
Severity: normal

Afer security update to version 1.4.9-+deb8u1 tnef is unable to extract
file that was working before update.

I'm using command(file attached):

tnef --list /tmp/winmail.dat-c8BSWz

and i get(strace attached):

tnef: mapi_attr.c:233: mapi_attr_read: Assertion
`(idx+(a->names[i].len*2)) <= len' failed.
Przerwane


After downgrading to version thef-1.4.9-1 extraction works fine.



-- System Information:
Debian Release: 8.7
   APT prefers stable-updates
   APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-040900-generic (SMP w/4 CPU cores)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8) (ignored:
LC_ALL set to pl_PL.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages tnef depends on:
ii  libc6  2.19-18+deb8u7

Versions of packages tnef recommends:
ii  mime-support  3.58

tnef suggests no packages.

-- no debconf information


Attachment: winmail.dat-c8BSWz
Description: Binary data

2977  execve("/usr/bin/tnef", ["tnef", "--list", "/tmp/winmail.dat-c8BSWz"], 
[/* 15 vars */]) = 0
2977  brk(0)                            = 0x1643000
2977  access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
2977  mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 
= 0x7fe444260000
2977  access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
2977  open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
2977  fstat(3, {st_mode=S_IFREG|0644, st_size=37190, ...}) = 0
2977  mmap(NULL, 37190, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe444256000
2977  close(3)                          = 0
2977  access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
2977  open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
2977  read(3, 
"\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\34\2\0\0\0\0\0"..., 832) = 832
2977  fstat(3, {st_mode=S_IFREG|0755, st_size=1738176, ...}) = 0
2977  mmap(NULL, 3844640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) 
= 0x7fe443c97000
2977  mprotect(0x7fe443e38000, 2097152, PROT_NONE) = 0
2977  mmap(0x7fe444038000, 24576, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a1000) = 0x7fe444038000
2977  mmap(0x7fe44403e000, 14880, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe44403e000
2977  close(3)                          = 0
2977  mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 
= 0x7fe444255000
2977  mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 
= 0x7fe444254000
2977  mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 
= 0x7fe444253000
2977  arch_prctl(ARCH_SET_FS, 0x7fe444254700) = 0
2977  mprotect(0x7fe444038000, 16384, PROT_READ) = 0
2977  mprotect(0x7fe444262000, 4096, PROT_READ) = 0
2977  munmap(0x7fe444256000, 37190)     = 0
2977  brk(0)                            = 0x1643000
2977  brk(0x1664000)                    = 0x1664000
2977  open("/tmp/winmail.dat-c8BSWz", O_RDONLY) = 3
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 
= 0x7fe44425f000
2977  read(3, 
"x\237>\"\354i\1\6\220\10\0\4\0\0\0\0\0\1\0\1\0\1\7\220\6\0\10\0\0\0\344\4"..., 
4096) = 4096
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  lseek(3, 0, SEEK_CUR)             = 4096
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  fstat(3, {st_mode=S_IFREG|0666, st_size=38632, ...}) = 0
2977  read(3, "></o:p></span></p><p class=MsoNo"..., 4096) = 4096
2977  read(3, 
"\0\0\0\0F\0\0\0\0\6\205\0\0\0\0\0\0\37\0007\0\1\0\0\0\216\0\0\0R\0E"..., 4096) 
= 4096
2977  write(2, "tnef: mapi_attr.c:233: mapi_attr"..., 92) = 92
2977  mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) 
= 0x7fe44425e000
2977  rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = 0
2977  gettid()                          = 2977
2977  tgkill(2977, 2977, SIGABRT)       = 0
2977  --- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=2977, si_uid=0} 
---
2977  +++ killed by SIGABRT (core dumped) +++

--- End Message ---
--- Begin Message ---
Source: tnef
Source-Version: 1.4.9-1+deb8u2

We believe that the bug you reported is fixed in the latest version of
tnef, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thorsten Alteholz <[email protected]> (supplier of updated tnef package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 24 Mar 2017 19:03:02 +0100
Source: tnef
Binary: tnef
Architecture: source amd64
Version: 1.4.9-1+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Kevin Coyner <[email protected]>
Changed-By: Thorsten Alteholz <[email protected]>
Description:
 tnef       - Tool to unpack MIME application/ms-tnef attachments
Closes: 857342
Changes:
 tnef (1.4.9-1+deb8u2) jessie-security; urgency=high
 .
   * Non-maintainer upload by the Wheezy LTS Team.
   * while fixing the CVEs, upstream introduced a regression
     fix-regression-1.patch and fix-regression-2.patch take care of
     that (Closes: #857342)
Checksums-Sha1:
 13b6a0e398475dd48bb481f464cff1ba5abd440d 1884 tnef_1.4.9-1+deb8u2.dsc
 d42ccbe3d41e797fb4133f2e01120680101e8782 3952575 tnef_1.4.9.orig.tar.gz
 57db01a177cdcba88fd5e8951ac5f00e779bad31 6816 tnef_1.4.9-1+deb8u2.debian.tar.xz
 338971e85c7a9839ba7f3cfffb709b497ddaaedd 47950 tnef_1.4.9-1+deb8u2_amd64.deb
Checksums-Sha256:
 ef34dbdd19d066ba79103fb2b8755eaef4bf8b42266cd7966d691efa9d29c1fc 1884 
tnef_1.4.9-1+deb8u2.dsc
 c4d64ec48f79681a11ee45b38c6b2177ce2d0a8c8f99733e90d462bd27eee6af 3952575 
tnef_1.4.9.orig.tar.gz
 c3186225a8d5e0b30e697ece1675e93a82e2c557e33e4fc6ba7307694e4353ed 6816 
tnef_1.4.9-1+deb8u2.debian.tar.xz
 70f134604a865b1bb41fe02ff60e46e2da6c337092c8e1c8840f9b1fde6b9883 47950 
tnef_1.4.9-1+deb8u2_amd64.deb
Files:
 e9be39019e56505ff5bd84d61fc821e2 1884 text optional tnef_1.4.9-1+deb8u2.dsc
 83a3a8fe0c15c9bbe2a8dae74c46b761 3952575 text optional tnef_1.4.9.orig.tar.gz
 319201ff7de46a8e18218963fdcfc6d5 6816 text optional 
tnef_1.4.9-1+deb8u2.debian.tar.xz
 f65e945c455ae655f29739d2b1260fca 47950 text optional 
tnef_1.4.9-1+deb8u2_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAljanTlfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR48aEACTc4QiMlv3lbHtKArJ4X98VtSXxfdi
kQ0zZ/0dx4eV/OiMDMPAimMVEfTKXY1UNuqaV2jwaKMS0AYQiaw7bnW4+i0vMmVV
egDxvtRWNfUK2MGKwIkn6JYNFOwiPUz6z9DpBDdX/dfRktlDJSunA25jeMlP9SN0
BMuv9d2+qcF/SOOSCjcL57BOJ7AoWMsd57vXvg/PWwpDYuUP4FzeQaIui+YfS1c1
zta90wLjNtRWrRV976RSrmEGOtF+ZINbFv2Pa7h4qwxPUvNbuDoI5PoMGElpB3//
Tgv2e/FvKSpXmaeBwUbXL+RdH25Jwv3b1kU9JmIOlo6ZfrJ2NBDnaK6YMHFbE4wm
5PB8a3wNQd9zxbzoXIZYBIjUXxIaLnYflXWtXjRsz/QEb5Kk9c2JMGgZjEdj9AdJ
ZIFdZJI0PVHKSdBzccT4jplbWbKjZRwMe2VqddILaum7+GVlHE6A1G9E5QGfkKcz
LRWiwuF+Ix9+7NE9NRcLwTRN0BUaq5zbYG9/gg1wuLzHXYSqM2l+JEjCbVwtYk/Q
vpR4gllQEKpBbBrVoUgTQO5uF8s/9lpRwx7ojylNqooMha1TIXZxkweDRG5jve+n
iFDt4i9yx/4xBJ7Z6dmgmdqPCaS2fjiqi80h6rDwdyOaSn5ypDwJ1B2ID+ba0P54
XZMYc/iBLoAulg==
=dred
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to