Bug#278298: marked as done (tetex-bin is affected by CAN-2004-0888)
Your message dated Tue, 30 Nov 2004 09:28:25 +0100
with message-id <87pt1vivva.fsf@alhambra.bioz.unibas.ch>
and subject line Bug#278298: woody is still affected
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 25 Oct 2004 23:01:31 +0000
>From bunk@stusta.de Mon Oct 25 16:01:31 2004
Return-path: <bunk@stusta.de>
Received: from mailout.stusta.mhn.de [141.84.69.5]
by spohr.debian.org with smtp (Exim 3.35 1 (Debian))
id 1CMDqF-00027O-00; Mon, 25 Oct 2004 16:01:31 -0700
Received: (qmail 15296 invoked from network); 25 Oct 2004 23:01:30 -0000
Received: from r063144.stusta.swh.mhn.de (10.150.63.144)
by mailhub.stusta.mhn.de with SMTP; 25 Oct 2004 23:01:30 -0000
Received: by r063144.stusta.swh.mhn.de (Postfix, from userid 1000)
id 9AE45B000D; Tue, 26 Oct 2004 01:00:59 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Adrian Bunk <bunk@stusta.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: tetex-bin might be affected by CAN-2004-0889
X-Mailer: reportbug 2.63
Date: Tue, 26 Oct 2004 01:00:59 +0200
Message-Id: <20041025230059.9AE45B000D@r063144.stusta.swh.mhn.de>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
Package: tetex-bin
Version: 2.0.2-22
Severity: grave
Tags: security
pdftohtml might be affected by CAN-2004-0889
(integer overflow issues in xpdf).
The code is there, but I haven't checked how it's actually used.
---------------------------------------
Received: (at 278298-done) by bugs.debian.org; 30 Nov 2004 08:46:39 +0000
>From frank@kuesterei.ch Tue Nov 30 00:46:39 2004
Return-path: <frank@kuesterei.ch>
Received: from idmailgate1.unizh.ch [130.60.68.105]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CZ3eh-0000lL-00; Tue, 30 Nov 2004 00:46:39 -0800
Received: from alhambra.bioz.unibas.ch ([130.60.169.112])
by idmailgate1.unizh.ch (8.12.10/8.12.10/Debian-2) with ESMTP id iAU8kaNc001318;
Tue, 30 Nov 2004 09:46:36 +0100
Received: from localhost ([127.0.0.1] helo=alhambra.bioz.unibas.ch)
by alhambra.bioz.unibas.ch with esmtp (Exim 3.35 #1 (Debian))
id 1CZ3N3-0000Yn-00; Tue, 30 Nov 2004 09:28:25 +0100
To: Hilmar Preusse <hille42@web.de>
Cc: 278298-done@bugs.debian.org
Subject: Re: Bug#278298: woody is still affected
X-Attribution: fant
X-Ehrenamt: http://www.langau.de
From: frank@kuesterei.ch (=?iso-8859-1?q?Frank_K=FCster?=)
In-Reply-To: <20041129183953.GE1952@preusse> (Hilmar Preusse's message of
"Mon, 29 Nov 2004 19:39:53 +0100")
References: <87sm70wxdn.fsf@alhambra.bioz.unibas.ch>
<20041123132511.GH7329@finlandia.infodrom.north.de>
<87wtwcv8wt.fsf@alhambra.bioz.unibas.ch>
<20041129183953.GE1952@preusse>
Date: Tue, 30 Nov 2004 09:28:25 +0100
Message-ID: <87pt1vivva.fsf@alhambra.bioz.unibas.ch>
User-Agent: Gnus/5.1002 (Gnus v5.10.2) Emacs/21.3 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Scanned: by amavisd-milter (http://www.amavis.org/)
Delivered-To: 278298-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
Hilmar Preusse <hille42@web.de> wrote:
>>=20
>> Here's the patch (against 7.1 which is in the archive):
>>=20
> Der ist doch nun auch Geschichte, oder?
Yes, it has been fixed by the upload of 1.0.7+20011202-7.3. I wrote the
changelog entry, but I didn't mean it to be used without review by the
security team. In particular, I didn't know whether security team
uploads, which are literally NMU's, usually just fix bugs, or really
close (in which case this has to be done manually, anyway).=20
So let's take this as a maintainer's acknowledgement of a the NMU, and I
close the bug.
Regards, Frank
--=20
Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer
Reply to: