Bug#286510: marked as done (kdelibs: CAN-2004-1158: Konqueror Window Injection Vulnerability)
Your message dated Mon, 3 Jan 2005 21:59:38 -0800
with message-id <20050104055934.GF17970@mauritius.dodds.net>
and subject line KDE 3.3.1 in sarge, closes many RC bugs
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 20 Dec 2004 16:54:31 +0000
>From asp16@alu.ua.es Mon Dec 20 08:54:31 2004
Return-path: <asp16@alu.ua.es>
Received: from 84-120-66-96.onocable.ono.com (chistera.yi.org) [84.120.66.96]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CgQnn-00046u-00; Mon, 20 Dec 2004 08:54:31 -0800
Received: from userid 1000 by chistera.yi.org with local (Exim 4.34)
id 1CgQnm-0001aJ-D8
for submit@bugs.debian.org; Mon, 20 Dec 2004 17:54:30 +0100
Date: Mon, 20 Dec 2004 17:54:30 +0100
From: Adeodato =?iso-8859-1?Q?Sim=F3?= <asp16@alu.ua.es>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: kdelibs: CAN-2004-1158: Konqueror Window Injection Vulnerability
Message-ID: <20041220165430.GA6073@chistera.yi.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
X-No-CC: Please respect my Mail-Followup-To header
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS,
HAS_PACKAGE autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
Package: kdelibs
Severity: grave
Tags: sarge, security
CAN-2004-1158 (see the KDE Security Advisory [1]) was fixed with the
upload kdelibs 4:3.3.1-3. A bug report never got submitted, so I'm
submiting one now (tagged sarge) to properly track and document the
issue.
[1] http://www.kde.org/info/security/advisory-20041213-1.txt
kdelibs >= 4:3.3.1-4 is scheduled to be included in sarge "soon".
--
Adeodato Simó
EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
A conference is a gathering of important people who singly can do nothing
but together can decide that nothing can be done.
-- Fred Allen
---------------------------------------
Received: (at 286510-done) by bugs.debian.org; 4 Jan 2005 05:59:38 +0000
>From vorlon@debian.org Mon Jan 03 21:59:38 2005
Return-path: <vorlon@debian.org>
Received: from dsl093-039-086.pdx1.dsl.speakeasy.net (localhost.localdomain) [66.93.39.86]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1ClhjG-0002gy-00; Mon, 03 Jan 2005 21:59:38 -0800
Received: by localhost.localdomain (Postfix, from userid 1000)
id C24BD1720C5; Mon, 3 Jan 2005 21:59:38 -0800 (PST)
Date: Mon, 3 Jan 2005 21:59:38 -0800
From: Steve Langasek <vorlon@debian.org>
To: 282352-done@bugs.debian.org, 285126-done@bugs.debian.org,
271256-done@bugs.debian.org, 286510-done@bugs.debian.org,
282364-done@bugs.debian.org, 282232-done@bugs.debian.org,
280373-done@bugs.debian.org, 252670-done@bugs.debian.org,
278173-done@bugs.debian.org, 287080-done@bugs.debian.org,
253701-done@bugs.debian.org, 247243-done@bugs.debian.org,
282257-done@bugs.debian.org
Cc: debian-release@lists.debian.org
Subject: KDE 3.3.1 in sarge, closes many RC bugs
Message-ID: <20050104055934.GF17970@mauritius.dodds.net>
Mail-Followup-To: 282352-done@bugs.debian.org,
285126-done@bugs.debian.org, 271256-done@bugs.debian.org,
286510-done@bugs.debian.org, 282364-done@bugs.debian.org,
282232-done@bugs.debian.org, 280373-done@bugs.debian.org,
252670-done@bugs.debian.org, 278173-done@bugs.debian.org,
287080-done@bugs.debian.org, 253701-done@bugs.debian.org,
247243-done@bugs.debian.org, 282257-done@bugs.debian.org,
debian-release@lists.debian.org
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="m1UC1K4AOz1Ywdkx"
Content-Disposition: inline
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: 286510-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-5.0 required=4.0 tests=BAYES_00,VALID_BTS_CONTROL
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 13
--m1UC1K4AOz1Ywdkx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
tags 285126 -sarge
tags 271256 -sarge
tags 285126 -sarge
tags 252670 -sarge
tags 278173 +sid
tags 253701 -sarge
tags 247243 -sarge
thanks
KDE 3.3 has been accepted into testing and should be visible from the
mirrors starting tomorrow. I believe all of these RC bugs can therefore be
closed.
Many thanks to the KDE team for their efforts in making this happen, and to
Anthony Towns for handholding britney through the transition.
--=20
Steve Langasek
postmodern programmer
--m1UC1K4AOz1Ywdkx
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFB2jDGKN6ufymYLloRAvK1AKCt069o1WpYMZLD2v/FBkFDeD+9HQCfclW7
9IlwTEOC5hGQTBoHmwTUHYQ=
=GV3v
-----END PGP SIGNATURE-----
--m1UC1K4AOz1Ywdkx--
Reply to: