Your message dated Sun, 6 Feb 2005 23:27:41 +0100
with message-id <[EMAIL PROTECTED]>
and subject line fixed
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Jan 2005 12:03:43 +0000
>From [EMAIL PROTECTED] Thu Jan 20 04:03:42 2005
Return-path: <[EMAIL PROTECTED]>
Received: from tornado.dat.etsit.upm.es (dat.etsit.upm.es) [138.100.17.73]
by spohr.debian.org with smtp (Exim 3.35 1 (Debian))
id 1Crb2M-0000vT-00; Thu, 20 Jan 2005 04:03:42 -0800
Received: (qmail 12925 invoked by uid 1013); 20 Jan 2005 12:03:40 -0000
Date: Thu, 20 Jan 2005 13:03:40 +0100
From: Javier =?iso-8859-1?Q?Fern=E1ndez-Sanguino_Pe=F1a?= <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: mysql-server: Security fixes pending in experimental version
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="qFgkTsE6LiHkLPZw"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--qFgkTsE6LiHkLPZw
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Package: mysql-server
Version: 4.1.7-2
Priority: grave
Tags: experimental
Just a quick note to tell that there are several symlink vulnerabilities in
the experimental version of mysql-server which have been fixed in sid's.=20
This includes (but is not limited to) mysqlaccess (#291122), and
mysql_install_db.sh
Just so these are reviewed before the package is moved into sid (although=
=20
they are fixed upstream, so a new version should fix them too)
Regards
Javier
--qFgkTsE6LiHkLPZw
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFB754ci4sehJTrj0oRAob+AKCpNMMW1eUuyO2sulilPLXHqUFIkwCg2280
fseoEb27GMhrrYP06LmSh8Q=
=ug/O
-----END PGP SIGNATURE-----
--qFgkTsE6LiHkLPZw--
---------------------------------------
Received: (at 291378-done) by bugs.debian.org; 6 Feb 2005 22:27:43 +0000
>From [EMAIL PROTECTED] Sun Feb 06 14:27:43 2005
Return-path: <[EMAIL PROTECTED]>
Received: from gate.lathspell.de (app109.intern) [212.117.68.82]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CxusZ-0000qU-00; Sun, 06 Feb 2005 14:27:43 -0800
Received: by app109.intern (Postfix, from userid 1000)
id F21B1C5A6; Sun, 6 Feb 2005 23:27:41 +0100 (CET)
Date: Sun, 6 Feb 2005 23:27:41 +0100
From: Christian Hammers <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: fixed
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
X-BadReturnPath: [EMAIL PROTECTED] rewritten as [EMAIL PROTECTED]
using "From" header
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-2.0 required=4.0 tests=BAYES_00,ONEWORD autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
The vulnerable MySQL packages have been removed from experimental.
bye,
-christian-
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
