Your message dated Mon, 15 May 2006 10:47:28 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#361913: fixed in linphone 1.3.5-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: linphone
Version: 1.2.0-3
Severity: grave
Tags: security
Justification: user security hole
The accounts information, including CLEAR-TEXT passwords, is stored in
$HOME/.gnome2/linphone, which is by default world-readable. It should
be in $HOME/.gnome2_private/linphone (or any other path below
$HOME/.gnome2_private/), where it will be safe, since
$HOME/.gnome2_private/ is mode 0700.
sarge does not contain linphone.
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (200, 'experimental')
Architecture: i386 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-deb1-64bit
Locale: LANG=fr_LU.UTF-8, LC_CTYPE=fr_LU.UTF-8 (charmap=UTF-8)
Versions of packages linphone depends on:
ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi
ii libatk1.0-0 1.10.3-1 The ATK accessibility toolkit
ii libbonobo2-0 2.10.1-1 Bonobo CORBA interfaces library
ii libbonoboui2-0 2.10.1-2 The Bonobo UI library
ii libc6 2.3.6-1 GNU C Library: Shared libraries an
ii libcairo2 1.0.2-3 The Cairo 2D vector graphics libra
ii libfontconfig1 2.3.2-2 generic font configuration library
ii libgconf2-4 2.12.1-9 GNOME configuration database syste
ii libglib2.0-0 2.8.6-1 The GLib library of C routines
ii libgnome-keyring0 0.4.7-1 GNOME keyring services library
ii libgnome2-0 2.12.0.1-5 The GNOME 2 library - runtime file
ii libgnomecanvas2-0 2.12.0-2 A powerful object-oriented display
ii libgnomeui-0 2.12.1-1 The GNOME 2 libraries (User Interf
ii libgnomevfs2-0 2.12.2-6 GNOME virtual file-system (runtime
ii libgtk2.0-0 2.8.12-1 The GTK+ graphical user interface
ii libice6 6.9.0.dfsg.1-4 Inter-Client Exchange library
ii liblinphone1 1.2.0-3 linphone web phone's library (supp
ii liborbit2 1:2.12.4-1 libraries for ORBit2 - a CORBA ORB
ii libosip2-3 2.2.2-2 Session Initiation Protocol (SIP)
ii libpanel-applet2-0 2.12.3-1 library for GNOME 2 panel applets
ii libpango1.0-0 1.10.3-1 Layout and rendering of internatio
ii libpopt0 1.7-5 lib for parsing cmdline parameters
ii libsm6 6.9.0.dfsg.1-4 X Window System Session Management
ii libx11-6 6.9.0.dfsg.1-4 X Window System protocol client li
ii libxcursor1 1.1.3-1 X cursor management library
ii libxext6 6.9.0.dfsg.1-4 X Window System miscellaneous exte
ii libxi6 6.9.0.dfsg.1-4 X Window System Input extension li
ii libxinerama1 6.9.0.dfsg.1-4 X Window System multi-head display
ii libxml2 2.6.23.dfsg.2-2 GNOME XML library
ii libxrandr2 6.9.0.dfsg.1-4 X Window System Resize, Rotate and
ii libxrender1 1:0.9.0.2-1 X Rendering Extension client libra
ii linphone-nox 1.2.0-3 web phone
ii zlib1g 1:1.2.3-9 compression library - runtime
linphone recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: linphone
Source-Version: 1.3.5-1
We believe that the bug you reported is fixed in the latest version of
linphone, which is due to be installed in the Debian FTP archive:
liblinphone1-dev_1.3.5-1_i386.deb
to pool/main/l/linphone/liblinphone1-dev_1.3.5-1_i386.deb
liblinphone1_1.3.5-1_i386.deb
to pool/main/l/linphone/liblinphone1_1.3.5-1_i386.deb
libortp4-dev_1.3.5-1_i386.deb
to pool/main/l/linphone/libortp4-dev_1.3.5-1_i386.deb
libortp4_1.3.5-1_i386.deb
to pool/main/l/linphone/libortp4_1.3.5-1_i386.deb
linphone-common_1.3.5-1_all.deb
to pool/main/l/linphone/linphone-common_1.3.5-1_all.deb
linphone-nox_1.3.5-1_i386.deb
to pool/main/l/linphone/linphone-nox_1.3.5-1_i386.deb
linphone_1.3.5-1.diff.gz
to pool/main/l/linphone/linphone_1.3.5-1.diff.gz
linphone_1.3.5-1.dsc
to pool/main/l/linphone/linphone_1.3.5-1.dsc
linphone_1.3.5-1_i386.deb
to pool/main/l/linphone/linphone_1.3.5-1_i386.deb
linphone_1.3.5.orig.tar.gz
to pool/main/l/linphone/linphone_1.3.5.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Samuel Mimram <[EMAIL PROTECTED]> (supplier of updated linphone package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 15 May 2006 09:02:05 +0000
Source: linphone
Binary: libortp4-dev libortp4 linphone liblinphone1 liblinphone1-dev
linphone-nox linphone-common
Architecture: source i386 all
Version: 1.3.5-1
Distribution: unstable
Urgency: low
Maintainer: Debian VoIP Team <[EMAIL PROTECTED]>
Changed-By: Samuel Mimram <[EMAIL PROTECTED]>
Description:
liblinphone1 - linphone web phone's library (supporting the SIP protocol)
liblinphone1-dev - linphone web phone's library (supporting the SIP protocol)
libortp4 - Real-time Transport Protocol stack
libortp4-dev - Real-time Transport Protocol stack
linphone - web phone
linphone-common - web phone
linphone-nox - web phone
Closes: 346435 361913 365523
Changes:
linphone (1.3.5-1) unstable; urgency=low
.
[ Kilian Krause ]
* Bump speex build-dep to 1.1.12 as configure requests.
.
[ Samuel Mimram ]
* New upstream release.
* Added no_developer_doc.dpatch in order not to build some parts of the
documentation which don't build for now (we didn't ship them anyway),
closes: #365523. We need to regenerate configure and Makefiles for this.
* Added world_readable_passwords.dpatch to change the permissions of the
configuration file to 600 (thanks Alec Berryman). This might be too strict
but at least it is safe, closes: #361913.
* Updated desktop_icon.dpatch to correct the location of the icon in the
linphone.desktop file, closes: #346435.
* Updated standards version to 3.7.2, no changes needed.
Files:
9dc6bbc731ca1a00ca375bef9c037c8d 1102 sound optional linphone_1.3.5-1.dsc
522b08a22c5e1de281676cddd3f2bcf6 7411961 sound optional
linphone_1.3.5.orig.tar.gz
c926661377085a7792f40627c4055ae2 15123 sound optional linphone_1.3.5-1.diff.gz
81e0e68d004b2d06dbea662be73f6afc 187662 sound optional
linphone_1.3.5-1_i386.deb
4cb039530b3a34671a52ac4d94ed5b91 73450 sound optional
linphone-nox_1.3.5-1_i386.deb
34dc96c450c0308fb688ea08f76d92ba 5889916 sound optional
linphone-common_1.3.5-1_all.deb
26cb336f8b072b62c48212ec293b0b5a 187556 libs optional
liblinphone1_1.3.5-1_i386.deb
722cab3ded7caa3501865f6360a90fe5 26572 libdevel optional
liblinphone1-dev_1.3.5-1_i386.deb
4dcf1aafb3c477acd1222af6fd791674 39232 libs optional libortp4_1.3.5-1_i386.deb
042a6a5de9b12281f396fa099327d8e0 40564 libdevel optional
libortp4-dev_1.3.5-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFEaLrKIae1O4AJae8RAojvAJ9G7DkXdT0JS91OOiPXcxkwwumgPQCfVsM7
7yHcj18NOlCJSoo/E+SjI60=
=pSgI
-----END PGP SIGNATURE-----
--- End Message ---
