Your message dated Tue, 10 Aug 2021 17:33:30 +0000 with message-id <e1mdvd4-00084p...@fasolo.debian.org> and subject line Bug#992045: fixed in cpio 2.13+dfsg-5 has caused the Debian Bug report #992045, regarding CVE-2021-38185 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 992045: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992045 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: cpio Version: 2.13+dfsg-4 Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team <t...@security.debian.org> https://github.com/fangqyi/cpiopwn https://git.savannah.gnu.org/cgit/cpio.git/commit/?id=dd96882877721703e19272fe25034560b794061b https://lists.gnu.org/archive/html/bug-cpio/2021-08/msg00000.html https://lists.gnu.org/archive/html/bug-cpio/2021-08/msg00002.html Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: cpio Source-Version: 2.13+dfsg-5 Done: Anibal Monsalve Salazar <ani...@debian.org> We believe that the bug you reported is fixed in the latest version of cpio, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 992...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Anibal Monsalve Salazar <ani...@debian.org> (supplier of updated cpio package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 11 Aug 2021 01:18:33 +1000 Source: cpio Architecture: source Version: 2.13+dfsg-5 Distribution: unstable Urgency: medium Maintainer: Anibal Monsalve Salazar <ani...@debian.org> Changed-By: Anibal Monsalve Salazar <ani...@debian.org> Closes: 992045 Changes: cpio (2.13+dfsg-5) unstable; urgency=medium . * Fix CVE-2021-38185 Add patch 992045-CVE-2021-38185-rewrite-dynamic-string-support Closes: #992045 Checksums-Sha1: 6cf4b00f94f13cdbdeaf9a793dd449086e4eccc6 2000 cpio_2.13+dfsg-5.dsc 63ec6d3eee9e6d6bbb6e485d30df14b749f1185a 35684 cpio_2.13+dfsg-5.debian.tar.xz 52b3818bc92e98645be16b8b55a03f187964e1a4 5623 cpio_2.13+dfsg-5_amd64.buildinfo Checksums-Sha256: 9630c6a1dc0f99bb6be924d8a44781b556866efe94c1a1c3880cf046744ad812 2000 cpio_2.13+dfsg-5.dsc ba5148e3fc6001028634f4b5833675ebb5b7d6e62c1a5b541feb3a6f8ffc763e 35684 cpio_2.13+dfsg-5.debian.tar.xz e8f8c027146a2efc9ebfb6be3ff1f17b9976f26d69743b5304ffcad404897f44 5623 cpio_2.13+dfsg-5_amd64.buildinfo Files: 5117537c6457943aed82054a0d8b32d2 2000 utils important cpio_2.13+dfsg-5.dsc 43497726f2654cdffc75100ab32ec27a 35684 utils important cpio_2.13+dfsg-5.debian.tar.xz 786d8f6aef4465eac6ba9ed242d182b9 5623 utils important cpio_2.13+dfsg-5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJhErDlAAoJEHxWrP6UeJfYwucP+gM6ak0xo1l+eHg68ArpJB0f 0K5GkwBTOoHglDopqwuntVW0MsFoFaXGJzTwbUtC7DwYegHo42v9tqjaHGP+HWjX wtGAPdaifxan9ADT0KSvjarrindKiL0xTWmRS/FaJhzEudsbcgNbHqPQZzxzuLGy h6cnNuHYCH0BQSvzuwf+wtmqdXXuJGYHMuxFpoCd7QDZZO0WPTrj+uaP7mBvFV7u 27hE0pfhFDtLTPneEcvS6Lc4ss5lvkiWgCPjdUSdElMecQiFILmHR+810t1X+QsR ++7oOs0U5Bz94XX93EMI6EX13LqF5oCtO1llu5lgcUGp7Vu0h1Njl0/xF9KH3xEN zjQAm6CJ1cSYIYmInWjrDuZBvAVptFnaUyhDX6JHMTF5cXUg5pvUq3jOP55GbkMk 1K7lyuc1L27LYyteHKxeI1w31uEjXAbTT+egO/W/Jy3JfhgzULDeezuRozqoZ4Gv BdTigeDqplphhRDEJ0PCAdzpHOyEMOSVPfbt8A/fx6zp/Ac5IRjZJtHluTw8deFP p3etwKtRctxavhdWrRWAS5taftCGDmjOPbxgeUWO6jwSnSMG14MlqaoNS95G9XfL F1enc+IBtrt8iQAqGnTBG6HRXdEd2CpFCvZnrRJYU/uj57hFnDo3+TBXSPVlZDHU jiU33tYzEErTaAuun10o =Mctk -----END PGP SIGNATURE-----
--- End Message ---
