Your message dated Wed, 03 Jan 2024 17:34:03 +0000 with message-id <e1rl57z-006otg...@fasolo.debian.org> and subject line Bug#1059906: Removed package(s) from unstable has caused the Debian Bug report #981912, regarding libsdes4j-java: provoked IDS to block download thinking it's Unix.Trojan.Chalubo to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 981912: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981912 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libsdes4j-java Version: 1.1.4-1.1 Severity: normal Dear Maintainer, This isn't a bug in the package, just a warning about a problem getting the package. Our debmirror job has been failing: Download of pool/main/s/sdes4j/libsdes4j-java-doc_1.1.4-1.1_all.deb failed: 500 Status read failed: Connection reset by peer Download of pool/main/s/sdes4j/libsdes4j-java_1.1.4-1.1_all.deb failed: 500 Status read failed: Connection reset by peer And our intrusion detection system (name and vendor unknown to me) has been firing off alerts like: Total Alerts in Database: 3058 Last Email Time: 2021-02-03 17:20:02 Current Time: 2021-02-03 17:25:02 Total New Alerts: 1 Filter Matching : 1 +--------------------------------------------------------------------+ Alerts (shown: 1/available: 1) (limit: 50) +--------------------------------------------------------------------+ Device : <elided> Timestamp : 2021-02-03 17:23:16 Protocol : tcp Alert Message : MALWARE-CNC Unix.Trojan.Chalubo downloader connection (1:48281:3) Session : <elided>:37596 -> 64.50.233.100:80 [*] 0 more events originated from this Source IP +---------------------------------------+ | Destination Port Count +---------------------------------------+ 80 1 +---------------------------------------+ | Source IP Count +---------------------------------------+ <elided> 1 Experimenting with manual downloads of eg http://google.com/libsdes suggests that any URL containing libsdes is blocked. Using https appears to be a work around. -- System Information: Debian Release: 9.12 APT prefers oldstable-updates APT policy: (990, 'oldstable-updates'), (990, 'oldstable'), (500, 'oldstable-debug'), (500, 'oldoldstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-12-amd64 (SMP w/12 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libsdes4j-java depends on: ii libcommons-codec-java 1.10-1 libsdes4j-java recommends no packages. Versions of packages libsdes4j-java suggests: pn libsdes4j-java-doc <none>
--- End Message ---
--- Begin Message ---Version: 1.1.4-1.1+rm Dear submitter, as the package sdes4j has just been removed from the Debian archive unstable we hereby close the associated bug reports. We are sorry that we couldn't deal with your issue properly. For details on the removal, please see https://bugs.debian.org/1059906 The version of this package that was in Debian prior to this removal can still be found using https://snapshot.debian.org/. Please note that the changes have been done on the master archive and will not propagate to any mirrors until the next dinstall run at the earliest. This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org. Debian distribution maintenance software pp. Thorsten Alteholz (the ftpmaster behind the curtain)
--- End Message ---
__ This is the maintainer address of Debian's Java team <https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>. Please use debian-j...@lists.debian.org for discussions and questions.
