Your message dated Sat, 13 Jan 2007 16:17:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#405006: fixed in libgphoto2 2.2.1-13
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: libgphoto2-2
Version: 2.2.1-12
Severity: grave
Tags: security

In /etc/udev/libgphoto2_generic_ptp_support.rules, there is the following
rule:

ACTION=="add", SUBSYSTEM=="usb_device", ENV{INTERFACE}="6/1/1", \
  PROGRAM="/bin/sh -c 'K=%k; K=$${K#usbdev}; printf bus/usb/%%03i/%%03i 
$${K%%%%.*} $${K#*.}'", \
  NAME="%c", MODE="0660", GROUP="plugdev"

The single = sign after ENV{INTERFACE} means that the INTERFACE environment
variable is set, not queried. The result is that all USB devices, and not
only the PTP ones, are set to the plugdev group, thus giving some users
access to devices they should not have access to.

Suggested fix: put two equals signs

Regards,

-- 
  Nicolas George


Irrelevant system information:

ii  adduser           3.100      
ii  libc6             2.3.6.ds1-8
ii  libexif12         0.6.13-5   
ii  libgphoto2-port0  2.2.1-12   
ii  libjpeg62         6b-13      
ii  libltdl3          1.5.22-4   
ii  udev              0.103-1    
Linux hellroy 2.6.18-3-686 #1 SMP Mon Dec 4 16:41:14 UTC 2006 i686 GNU/Linux

Attachment: signature.asc
Description: Digital signature


--- End Message ---
--- Begin Message ---
Source: libgphoto2
Source-Version: 2.2.1-13

We believe that the bug you reported is fixed in the latest version of
libgphoto2, which is due to be installed in the Debian FTP archive:

libgphoto2-2-dev_2.2.1-13_i386.deb
  to pool/main/libg/libgphoto2/libgphoto2-2-dev_2.2.1-13_i386.deb
libgphoto2-2_2.2.1-13_i386.deb
  to pool/main/libg/libgphoto2/libgphoto2-2_2.2.1-13_i386.deb
libgphoto2-port0_2.2.1-13_i386.deb
  to pool/main/libg/libgphoto2/libgphoto2-port0_2.2.1-13_i386.deb
libgphoto2_2.2.1-13.diff.gz
  to pool/main/libg/libgphoto2/libgphoto2_2.2.1-13.diff.gz
libgphoto2_2.2.1-13.dsc
  to pool/main/libg/libgphoto2/libgphoto2_2.2.1-13.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Frederic Peters <[EMAIL PROTECTED]> (supplier of updated libgphoto2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sat, 13 Jan 2007 16:49:02 +0100
Source: libgphoto2
Binary: libgphoto2-port0 libgphoto2-2-dev libgphoto2-2
Architecture: source i386
Version: 2.2.1-13
Distribution: unstable
Urgency: medium
Maintainer: Frederic Peters <[EMAIL PROTECTED]>
Changed-By: Frederic Peters <[EMAIL PROTECTED]>
Description: 
 libgphoto2-2 - gphoto2 digital camera library
 libgphoto2-2-dev - gphoto2 digital camera library (development files)
 libgphoto2-port0 - gphoto2 digital camera port library
Closes: 405006
Changes: 
 libgphoto2 (2.2.1-13) unstable; urgency=medium
 .
   * debian/check_ptp_camera, packaging/generic/print-camera-list.c: backported
     generic PTP support from 2.3.0 package
     * unrecognized USB items no longer affected to plugdev group
       (closes: #405006)
Files: 
 8bf716b2cea9835a9dd9bbd80433eab7 1062 libs optional libgphoto2_2.2.1-13.dsc
 79804a8f25eec914aaff16de77b2884b 112473 libs optional 
libgphoto2_2.2.1-13.diff.gz
 28d95566ed214869408341d4aed8f28e 1897772 libdevel optional 
libgphoto2-2-dev_2.2.1-13_i386.deb
 cc07daeb109d6f67688e68b782a27d8e 118370 libs optional 
libgphoto2-port0_2.2.1-13_i386.deb
 0ddaff410023dc0a1d370ebd9c409419 1104104 libs optional 
libgphoto2-2_2.2.1-13_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFFqQEdoR3LsWeD7V4RApb9AKCNdTsa1mT3hHIiVxl6/uoPDi1/lQCeIht7
nJ+m+a2FT2s98NiXqllcCz4=
=krTp
-----END PGP SIGNATURE-----


--- End Message ---

Reply via email to