Your message dated Sat, 23 Oct 2010 21:02:27 +0000
with message-id <e1p9ler-00012g...@franck.debian.org>
and subject line Bug#598584: fixed in imp4 4.3.7+debian0-2.1
has caused the Debian Bug report #598584,
regarding imp4: XSS in fetchmail configuration
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
598584: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=598584
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: imp4
Severity: grave
Tags: security
Justification: user security hole
Please see
http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0379.html
Cheers,
Moritz
-- System Information:
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
--- End Message ---
--- Begin Message ---
Source: imp4
Source-Version: 4.3.7+debian0-2.1
We believe that the bug you reported is fixed in the latest version of
imp4, which is due to be installed in the Debian FTP archive:
imp4_4.3.7+debian0-2.1.diff.gz
to main/i/imp4/imp4_4.3.7+debian0-2.1.diff.gz
imp4_4.3.7+debian0-2.1.dsc
to main/i/imp4/imp4_4.3.7+debian0-2.1.dsc
imp4_4.3.7+debian0-2.1_all.deb
to main/i/imp4/imp4_4.3.7+debian0-2.1_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 598...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Moritz Muehlenhoff <j...@debian.org> (supplier of updated imp4 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 23 Oct 2010 16:49:35 +0200
Source: imp4
Binary: imp4
Architecture: source all
Version: 4.3.7+debian0-2.1
Distribution: unstable
Urgency: low
Maintainer: Horde Maintainers <pkg-horde-hack...@lists.alioth.debian.org>
Changed-By: Moritz Muehlenhoff <j...@debian.org>
Description:
imp4 - webmail component for horde framework
Closes: 598584
Changes:
imp4 (4.3.7+debian0-2.1) unstable; urgency=low
.
* Non-maintainer upload by the Security Team
* Fix XSS (Closes: #598584)
Checksums-Sha1:
3d71111f6cceecaa91dcc9e87af69d835ce5417d 1313 imp4_4.3.7+debian0-2.1.dsc
1e4576e45920caa85ea600a4b6308f29d427c172 15026 imp4_4.3.7+debian0-2.1.diff.gz
b95fe692b2dfce6ec604bdd07617cecbbcf3af52 5370594 imp4_4.3.7+debian0-2.1_all.deb
Checksums-Sha256:
5cf6fcc65eff06fb906849167c5e9c377494b73ca670eedc8f2dffb6ce07b51f 1313
imp4_4.3.7+debian0-2.1.dsc
b617f7567b0a7c4347c41058a5a3caa38187362732130697f0f33ba1f2bc5709 15026
imp4_4.3.7+debian0-2.1.diff.gz
ec50a43c8f372ccef59563306e5a0e99f0d89fe38851c284a49806a3d210bfde 5370594
imp4_4.3.7+debian0-2.1_all.deb
Files:
166bd7fbfcdce5330e660a2a37f57a46 1313 web optional imp4_4.3.7+debian0-2.1.dsc
e8bfc48b408eb90105e768263fc1a529 15026 web optional
imp4_4.3.7+debian0-2.1.diff.gz
421c5f854bf743df649deb5460b91239 5370594 web optional
imp4_4.3.7+debian0-2.1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkzDILcACgkQXm3vHE4uylqmqQCg4DOS7BqEIL3/xrDPeFV17qRb
RIQAoLgg5mtx3UxVLCi8Q7PMzJRRfjzz
=bywP
-----END PGP SIGNATURE-----
--- End Message ---
