[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#355122: marked as done (missing hunk in latest security patch?)

Your message dated Mon, 16 Jul 2007 23:47:22 +0300
with message-id <11fae7c70707161347r7d080cf4sde5260fdaaec338d@mail.gmail.com>
and subject line Bug#355122: [Debian QA] please review your old bug reports against CUPS
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
Package: cupsys
Version: 1.1.14-5woody14
Severity: important
Tags: woody security

Hi,

This is a spin off from #346086. The bug is fixed in teTeX
2.0.2-30sarge4. Further the bug is fixed in the woody version except
the last hunk, which seems to be missing.
I've asked the submitter if one really needs that hunk and got the
answer that the missing hunk could make xpdf hang. He further said:

"This is precisely the fix that is required to avoid endless loops
with prematurely ending PDF files (CVE-2005-3625). So it is not
exploitable to execute any code or something, but it's still a nasty
DoS, particularly in Cups."

Please check if one really needs it in the xpdf version of woody
(1.0) and if yes apply it.
For further informations please refer to the bug quoted above.

Regards,
  Hilmar
-- 
sigmentation fault

--- End Message ---
--- Begin Message --- 
On 7/16/07, Hilmar Preusse <hille42@web.de> wrote:

On 15.07.07 =?UTF-8?Q? Martin-=C3=89ric?= Racine (q-funk@iki.fi) wrote:

Hi,

> You are receiving this e-mail because you have filed a bug report
> against an old version of CUPS that is no longer available in any
> current Debian release.
>
> Please review your bug report and inform us whether it still
> applies to version 1.2.7-4, as present in Debian release 4.0
> (Etch), or to newer releases present in the testing branch.
>
My bug has tag woody, as it possibly applies to the woody version.
Read: it eventually applies to the woody version, but definitely to
any later one. As woody is out of support, you may close the case.


So I'm indeed closing as you suggested.

--
Martin-Éric Racine
http://q-funk.iki.fi

--- End Message ---
Reply to: