Your message dated Tue, 22 Mar 2005 15:53:10 +1100
with message-id <[EMAIL PROTECTED]>
and subject line Closing this bug as the package has been removed
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Mar 2005 21:55:50 +0000
>From [EMAIL PROTECTED] Sun Mar 20 13:55:49 2005
Return-path: <[EMAIL PROTECTED]>
Received: from inutil.org (vserver151.vserver151.serverflex.de)
[193.22.164.111]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DD8Oj-0002GW-00; Sun, 20 Mar 2005 13:55:49 -0800
Received: from p548972c0.dip.t-dialin.net ([84.137.114.192]
helo=localhost.localdomain)
by vserver151.vserver151.serverflex.de with esmtpsa
(TLS-1.0:RSA_AES_256_CBC_SHA:32)
(Exim 4.44)
id 1DD8Oh-0004b2-81
for [EMAIL PROTECTED]; Sun, 20 Mar 2005 22:55:47 +0100
Received: from jmm by localhost.localdomain with local (Exim 4.50)
id 1DD8OY-0002Ne-U2
for [EMAIL PROTECTED]; Sun, 20 Mar 2005 22:55:38 +0100
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Moritz Muehlenhoff <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: limewire: Probable remote access to arbitrary files in Limewire
X-Mailer: reportbug 3.8
Date: Sun, 20 Mar 2005 22:55:38 +0100
Message-Id: <[EMAIL PROTECTED]>
X-SA-Exim-Connect-IP: 84.137.114.192
X-SA-Exim-Mail-From: [EMAIL PROTECTED]
X-SA-Exim-Scanned: No (on vserver151.vserver151.serverflex.de); SAEximRunCond
expanded to false
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: limewire
Version: 3.4.5-2
Severity: grave
Tags: security
Justification: user security hole
Secunia reports two vulnerabilities in Limewire that allow attackers remote
access to arbitrary files. For full details see
http://secunia.com/advisories/14555
Note: Limewire has been orphaned for a long time now (it's latest upload
nearly 1.5 years ago) and it therefore badly out-of-sync with upstream.
Secunia claims Limewire versions from 3.9.6 to 4.6.0 vulnerable, but it
should be double-checked, whether Sarge's out-dated version is affected
as well.
I guess the correct fix is a removal of Limewire; a moving target like
filesharing will hardly be useful after 1.5 years and will definitely
become fully unusable during Sarge's stable lifecycle.
There are not CAN IDs yet.
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.11
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)
---------------------------------------
Received: (at 300634-done) by bugs.debian.org; 22 Mar 2005 04:53:17 +0000
>From [EMAIL PROTECTED] Mon Mar 21 20:53:17 2005
Return-path: <[EMAIL PROTECTED]>
Received: from daedalus.andrew.net.au [210.18.204.2] (root)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DDbOE-00083d-00; Mon, 21 Mar 2005 20:53:14 -0800
Received: from daedalus.andrew.net.au (localhost.andrew.net.au [127.0.0.1])
by daedalus.andrew.net.au (8.13.3/8.13.3/Debian-6) with ESMTP id
j2M4rBe1027655
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
Tue, 22 Mar 2005 15:53:11 +1100
Received: (from [EMAIL PROTECTED])
by daedalus.andrew.net.au (8.13.3/8.13.3/Submit) id j2M4rACC027654;
Tue, 22 Mar 2005 15:53:10 +1100
Date: Tue, 22 Mar 2005 15:53:10 +1100
From: Andrew Pollock <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED], [EMAIL PROTECTED],
[EMAIL PROTECTED]
Subject: Closing this bug as the package has been removed
Message-ID: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
X-Scanned-By: MIMEDefang 2.51 on 210.18.204.2
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00 autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 7
This bug is being closed because the package has been removed from the
archive.
regards
Andrew
--
linux.conf.au 2005 - http://linux.conf.au/ - Birthplace of Tux
April 18th to 23rd - http://linux.conf.au/ - LINUX
Canberra, Australia - http://linux.conf.au/ - Get bitten!
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
