Your message dated Sat, 13 Jan 2007 16:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#405006: fixed in libgphoto2 2.2.1-13
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: libgphoto2-2
Version: 2.2.1-12
Severity: grave
Tags: security
In /etc/udev/libgphoto2_generic_ptp_support.rules, there is the following
rule:
ACTION=="add", SUBSYSTEM=="usb_device", ENV{INTERFACE}="6/1/1", \
PROGRAM="/bin/sh -c 'K=%k; K=$${K#usbdev}; printf bus/usb/%%03i/%%03i
$${K%%%%.*} $${K#*.}'", \
NAME="%c", MODE="0660", GROUP="plugdev"
The single = sign after ENV{INTERFACE} means that the INTERFACE environment
variable is set, not queried. The result is that all USB devices, and not
only the PTP ones, are set to the plugdev group, thus giving some users
access to devices they should not have access to.
Suggested fix: put two equals signs
Regards,
--
Nicolas George
Irrelevant system information:
ii adduser 3.100
ii libc6 2.3.6.ds1-8
ii libexif12 0.6.13-5
ii libgphoto2-port0 2.2.1-12
ii libjpeg62 6b-13
ii libltdl3 1.5.22-4
ii udev 0.103-1
Linux hellroy 2.6.18-3-686 #1 SMP Mon Dec 4 16:41:14 UTC 2006 i686 GNU/Linux
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: libgphoto2
Source-Version: 2.2.1-13
We believe that the bug you reported is fixed in the latest version of
libgphoto2, which is due to be installed in the Debian FTP archive:
libgphoto2-2-dev_2.2.1-13_i386.deb
to pool/main/libg/libgphoto2/libgphoto2-2-dev_2.2.1-13_i386.deb
libgphoto2-2_2.2.1-13_i386.deb
to pool/main/libg/libgphoto2/libgphoto2-2_2.2.1-13_i386.deb
libgphoto2-port0_2.2.1-13_i386.deb
to pool/main/libg/libgphoto2/libgphoto2-port0_2.2.1-13_i386.deb
libgphoto2_2.2.1-13.diff.gz
to pool/main/libg/libgphoto2/libgphoto2_2.2.1-13.diff.gz
libgphoto2_2.2.1-13.dsc
to pool/main/libg/libgphoto2/libgphoto2_2.2.1-13.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Frederic Peters <[EMAIL PROTECTED]> (supplier of updated libgphoto2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sat, 13 Jan 2007 16:49:02 +0100
Source: libgphoto2
Binary: libgphoto2-port0 libgphoto2-2-dev libgphoto2-2
Architecture: source i386
Version: 2.2.1-13
Distribution: unstable
Urgency: medium
Maintainer: Frederic Peters <[EMAIL PROTECTED]>
Changed-By: Frederic Peters <[EMAIL PROTECTED]>
Description:
libgphoto2-2 - gphoto2 digital camera library
libgphoto2-2-dev - gphoto2 digital camera library (development files)
libgphoto2-port0 - gphoto2 digital camera port library
Closes: 405006
Changes:
libgphoto2 (2.2.1-13) unstable; urgency=medium
.
* debian/check_ptp_camera, packaging/generic/print-camera-list.c: backported
generic PTP support from 2.3.0 package
* unrecognized USB items no longer affected to plugdev group
(closes: #405006)
Files:
8bf716b2cea9835a9dd9bbd80433eab7 1062 libs optional libgphoto2_2.2.1-13.dsc
79804a8f25eec914aaff16de77b2884b 112473 libs optional
libgphoto2_2.2.1-13.diff.gz
28d95566ed214869408341d4aed8f28e 1897772 libdevel optional
libgphoto2-2-dev_2.2.1-13_i386.deb
cc07daeb109d6f67688e68b782a27d8e 118370 libs optional
libgphoto2-port0_2.2.1-13_i386.deb
0ddaff410023dc0a1d370ebd9c409419 1104104 libs optional
libgphoto2-2_2.2.1-13_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFFqQEdoR3LsWeD7V4RApb9AKCNdTsa1mT3hHIiVxl6/uoPDi1/lQCeIht7
nJ+m+a2FT2s98NiXqllcCz4=
=krTp
-----END PGP SIGNATURE-----
--- End Message ---