[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#890480: marked as done (RFS: groonga/8.0.0-1)

Your message dated Tue, 20 Feb 2018 22:46:36 +0100
with message-id <20180220214636.sthrbubtdcdtjh3l@angband.pl>
and subject line Re: Bug#890480: RFS: groonga/8.0.0-1
has caused the Debian Bug report #890480,
regarding RFS: groonga/8.0.0-1
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
890480: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890480
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: sponsorship-requests
Severity: wishlist

Dear mentors,

I am looking for a sponsor for my package "groonga"

* Package name    : groonga
  Version         : 8.0.0-1
  Upstream Author : Groonga Project <packages@groonga.org>
* Url             : http://groonga.org/
* Licenses        : LGPL-2.1
  Section         : database

It builds those binary packages:

  * groonga
  * groonga-server-common
  * groonga-server-gqtp
  * libgroonga-dev
  * libgroonga0
  * groonga-tokenizer-mecab
  * groonga-token-filter-stem
  * groonga-plugin-suggest
  * groonga-bin
  * groonga-httpd
  * groonga-doc
  * groonga-examples
  * groonga-munin-plugins

To access further information about this package, visit the following URL:

    https://mentors.debian.net/package/groonga

Alternatively, one can download the package with dget using this command:
    dget -x https://mentors.debian.net/debian/pool/main/g/groonga/groonga_8.0.0-1.dsc


More information about groonga can be obtained from
    http://groonga.org/

Changes since last upload:

  * New upstream release.

Attachment: pgpbjjskwDEu3.pgp
Description: PGP signature


--- End Message ---
--- Begin Message --- 
On Thu, Feb 15, 2018 at 11:33:35AM +0900, Kentaro Hayashi wrote:
> * Package name    : groonga
>   Version         : 8.0.0-1

> Changes since last upload:
> 
>   * New upstream release.

Uploaded, although you'd want to fix the hardlink vulnerability in postinst.
"lintian -i groonga-server-common_*.deb" will tell you more.  In short,
anyone who can manage to execute arbitrary code as the groonga user, can
escalate to root on a subsequent upgrade.

It's no regression, thus I uploaded 8.0.0-1 as is.


Meow!
-- 
An imaginary friend squared is a real enemy.

--- End Message ---
Reply to: