[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#496411: marked as done (The possibility of attack with the help of symlinks in some Debian packages)

Your message dated Fri, 19 Dec 2008 09:32:13 +0000
with message-id <E1LDbiP-0000vE-L5@ries.debian.org>
and subject line Bug#496411: fixed in ltp 20081130+dfsg-3
has caused the Debian Bug report #496411,
regarding The possibility of attack with the help of symlinks in some Debian packages
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org

496411: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496411
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: ltp-network-test
Severity: grave

Hi, maintainer!

This message about the error concerns a few packages  at  once.   I've
tested all the packages (for Lenny) on my Debian mirror.  All  scripts
of packages (marked as executable) were tested.

In some packages I've discovered scripts with errors which may be used
by a user for damaging important system files or user's files.

For example if a script uses in its work a temp file which is  created
in /tmp directory, then every user can create symlink  with  the  same
name in this directory in order to  destroy  or  rewrite  some  system
or user file.  Symlink attack may also  lead  not  only  to  the  data
desctruction but to denial of service as well.

Even if you create files or directories with help of function 'RANDOM'
or pid(), then your system is not protected. Attacker can create many
symlinks in order to destroy your data or create 'denial  of  service'
for your package scripts.

Even if you make rm(dir) for files/directories, then  your  system  is
not protected. Attacker can permanently create symlinks.

This list is created with the help of script.  This list is sorted  by
hand. Howewer in some cases mistake is possible.

Please, Be understanding to possible mistakes. :)

I set Severity into grave for this bug. The table of discovered
problems is below.

Discussion of this bug you can see in debian-devel@:

Binary-package: r-base-core-ra (1.1.1-1)
    file: /usr/lib/Ra/lib/R/bin/javareconf
Binary-package: rccp (0.9-2)
    file: /usr/lib/rccp/delqueueask
Binary-package: mafft (6.240-1)
    file: /usr/bin/mafft-homologs
Binary-package: openoffice.org-common (1:2.4.1-6)
    file: /usr/lib/openoffice/program/senddoc
Binary-package: crossfire-maps (1.11.0-1)
    file: /usr/share/games/crossfire/maps/Info/combine.pl
Binary-package: sgml2x (1.0.0-11.1)
    file: /usr/bin/rlatex
Binary-package: liguidsoap (0.3.6-4)
    file: /var/lib/liguidsoap/liguidsoap.py
Binary-package: citadel-server (7.37-1)
    file: /usr/lib/citadel-server/migrate_aliases.sh
Binary-package: ampache (3.4.1-1)
    file: /usr/share/ampache/www/locale/base/gather-messages.sh
Binary-package: xen-utils-3.2-1 (3.2.1-2)
    file: /usr/lib/xen-3.2-1/bin/qemu-dm.debug
Binary-package: dtc-common (0.29.6-1)
    file: /usr/share/dtc/admin/accesslog.php
    file: /usr/share/dtc/admin/sa-wrapper
Binary-package: honeyd-common (1.5c-3)
    file: /usr/share/honeyd/scripts/test.sh
Binary-package: lustre-tests (1.6.5-1)
    file: /usr/lib/lustre/tests/runiozone
Binary-package: linuxtrade (3.65-8+b4)
    file: /usr/share/linuxtrade/bin/linuxtrade.bwkvol
    file: /usr/share/linuxtrade/bin/linuxtrade.wn
    file: /usr/share/linuxtrade/bin/moneyam.helper
Binary-package: freevo (1.8.1-0)
    file: /usr/bin/freevo.real
Binary-package: fml (4.0.3.dfsg-2)
    file: /usr/share/fml/libexec/mead.pl
Binary-package: rkhunter (1.3.2-3)
    file: /usr/bin/rkhunter
Binary-package: openswan (1:2.4.12+dfsg-1.1)
    file: /usr/lib/ipsec/livetest
Binary-package: linux-patch-openswan (1:2.4.12+dfsg-1.1)
    file: /usr/src/kernel-patches/all/openswan/packaging/utils/maysnap
    file: /usr/src/kernel-patches/all/openswan/packaging/utils/maytest
Binary-package: aptoncd (0.1-1.1)
    file: /usr/share/aptoncd/xmlfile.py
Binary-package: cdcontrol (1.90-1.1)
    file: /usr/lib/cdcontrol/writtercontrol
Binary-package: newsgate (1.6-23)
    file: /usr/bin/mkmailpost
Binary-package: gpsdrive-scripts (2.10~pre4-3)
    file: /usr/bin/geo-code
Binary-package: impose+ (0.2-11)
    file: /usr/bin/impose
Binary-package: mgt (2.31-5)
    file: /usr/games/mailgo
Binary-package: audiolink (0.05-1)
    file: /usr/bin/audiolink
Binary-package: ibackup (2.27-4.1)
    file: /usr/bin/ibackup
Binary-package: emacspeak (26.0-3)
    file: /usr/share/emacs/site-lisp/emacspeak/etc/extract-table.pl
Binary-package: bk2site (1:1.1.9-3.1)
    file: /usr/lib/cgi-bin/bk2site/redirect.pl
Binary-package: datafreedom-perl (0.1.7-1)
    file: /usr/bin/dfxml-invoice
Binary-package: emacs-jabber (0.7.91-1)
    file: /usr/lib/emacsen-common/packages/install/emacs-jabber
Binary-package: lmbench (3.0-a7-1)
    file: /usr/lib/lmbench/scripts/rccs
    file: /usr/lib/lmbench/scripts/STUFF
Binary-package: rancid-util (2.3.2~a8-1)
    file: /var/lib/rancid/getipacctg
Binary-package: ogle (0.9.2-5.2)
    file: /usr/lib/ogle/ogle_audio_debug
    file: /usr/lib/ogle/ogle_cli_debug
    file: /usr/lib/ogle/ogle_ctrl_debug
    file: /usr/lib/ogle/ogle_gui_debug
    file: /usr/lib/ogle/ogle_mpeg_ps_debug
    file: /usr/lib/ogle/ogle_mpeg_vs_debug
    file: /usr/lib/ogle/ogle_nav_debug
    file: /usr/lib/ogle/ogle_vout_debug
Binary-package: firehol (1.256-4)
    file: /sbin/firehol
Binary-package: aview (1.3.0rc1-8)
    file: /usr/bin/asciiview
Binary-package: radiance (3R9+20080530-3)
    file: /usr/bin/optics2rad
    file: /usr/bin/pdelta
    file: /usr/bin/dayfact
    file: /usr/bin/raddepend
Binary-package: vdr-dbg (1.6.0-5)
    file: /usr/bin/vdrleaktest
Binary-package: ogle-mmx (0.9.2-5.2)
    file: /usr/lib/ogle/ogle_audio_debug
    file: /usr/lib/ogle/ogle_cli_debug
    file: /usr/lib/ogle/ogle_ctrl_debug
    file: /usr/lib/ogle/ogle_gui_debug
    file: /usr/lib/ogle/ogle_mpeg_ps_debug
    file: /usr/lib/ogle/ogle_mpeg_vs_debug
    file: /usr/lib/ogle/ogle_nav_debug
    file: /usr/lib/ogle/ogle_vout_debug
Binary-package: convirt (0.8.2-3)
    file: /usr/share/convirt/image_store/_template_/provision.sh
    file: /usr/share/convirt/image_store/Linux_CD_Install/provision.sh
    file: /usr/share/convirt/image_store/Fedora_PV_Install/provision.sh
    file: /usr/share/convirt/image_store/CentOS_PV_Install/provision.sh
    file: /usr/share/convirt/image_store/common/provision.sh
    file: /usr/share/convirt/image_store/example/provision.sh
    file: /usr/share/convirt/image_store/Windows_CD_Install/provision.sh
Binary-package: printfilters-ppd (2.13-9)
    file: /usr/lib/printfilters/master-filter
Binary-package: r-base-core (2.7.1-1)
    file: /usr/lib/R/bin/javareconf
    file: /usr/lib/R/bin/javareconf.orig
Binary-package: xmcd (2.6-19.3)
    file: /usr/share/xmcd/scripts/ncsarmt
    file: /usr/share/xmcd/scripts/ncsawrap
Binary-package: tiger (1:3.2.2-3.1)
    file: /usr/lib/tiger/util/genmsgidx
Binary-package: scilab-bin (4.1.2-5)
    file: /usr/lib/scilab-4.1.2/bin/scilink
    file: /usr/lib/scilab-4.1.2/util/scidoc
    file: /usr/lib/scilab-4.1.2/util/scidem
Binary-package: dpkg-cross (2.3.0)
    file: /usr/share/dpkg-cross/bin/gccross
Binary-package: ltp-network-test (20060918-2.1)
    file: /usr/lib/debian-test/tests/linux/testcases/bin/ftp_setup_vsftp_conf
    file: /usr/lib/debian-test/tests/linux/testcases/bin/nfs_fsstress.sh
Binary-package: cman (2.20080629-1)
    file: /usr/sbin/fence_egenera
Binary-package: scratchbox2 (
    file: /usr/share/scratchbox2/scripts/dpkg-checkbuilddeps
    file: /usr/share/scratchbox2/scripts/sb2-check-pkg-mappings
Binary-package: sendmail-base (8.14.3-5)
    file: /usr/sbin/checksendmail
    file: /usr/bin/expn
Binary-package: fwbuilder (2.1.19-3)
    file: /usr/bin/fwb_install
Binary-package: sng (1.0.2-5)
    file: /usr/bin/sng_regress
Binary-package: dist (1:3.5-17-1)
    file: /usr/bin/patcil
    file: /usr/bin/patdiff
Binary-package: sympa (5.3.4-5)
    file: /usr/lib/cgi-bin/sympa/wwsympa.fcgi
    file: /usr/lib/sympa/bin/sympa.pl
Binary-package: postfix (2.5.2-2)
    file: /usr/lib/postfix_groups.pl
Binary-package: caudium (3:1.4.12-11)
    file: /usr/share/caudium/configvar
Binary-package: mgetty-fax (1.1.36-1.2)
    file: /usr/bin/faxspool
Binary-package: aegis (4.24-3)
    file: /usr/share/doc/aegis/examples/remind/bng_dvlpd.sh
    file: /usr/share/doc/aegis/examples/remind/bng_rvwd.sh
    file: /usr/share/doc/aegis/examples/remind/awt_dvlp.sh
    file: /usr/share/doc/aegis/examples/remind/awt_intgrtn.sh
Binary-package: aegis-web (4.24-3)
    file: /usr/lib/cgi-bin/aegis.cgi
Binary-package: digitaldj (0.7.5-6+b1)
    file: /usr/share/digitaldj/fest.pl
Binary-package: mon (0.99.2-12)
    file: /usr/lib/mon/alert.d/test.alert
Binary-package: feta (1.4.16)
    file: /usr/share/feta/plugins/to-upgrade
Binary-package: arb-common (0.0.20071207.1-4)
    file: /usr/lib/arb/SH/arb_fastdnaml
    file: /usr/lib/arb/SH/dszmconnect.pl
Binary-package: qemu (0.9.1-5)
    file: /usr/sbin/qemu-make-debian-root
Binary-package: apertium (3.0.7+1-1+b1)
    file: /usr/bin/apertium-gen-deformat
    file: /usr/bin/apertium-gen-reformat
    file: /usr/bin/apertium
Binary-package: xcal (4.1-18.3)
    file: /usr/bin/pscal
Binary-package: myspell-tools (1:3.1-20)
    file: /usr/bin/i2myspell
Binary-package: gccxml (0.9.0+cvs20080525-1)
    file: /usr/share/gccxml-0.9/MIPSpro/find_flags
Binary-package: freeradius-dialupadmin (2.0.4+dfsg-4)
    file: /usr/share/freeradius-dialupadmin/bin/backup_radacct
    file: /usr/share/freeradius-dialupadmin/bin/clean_radacct
    file: /usr/share/freeradius-dialupadmin/bin/monthly_tot_stats
    file: /usr/share/freeradius-dialupadmin/bin/tot_stats
    file: /usr/share/freeradius-dialupadmin/bin/truncate_radacct
Binary-package: dhis-server (5.3-1)
    file: /usr/lib/dhis-server/dhis-dummy-log-engine
Binary-package: wims (3.62-13)
    file: /var/lib/wims/public_html/bin/coqweb
    file: /var/lib/wims/bin/account.sh
Binary-package: initramfs-tools (0.92f)
    file: /usr/share/initramfs-tools/init
Binary-package: realtimebattle-common (1.0.8-7)
    file: /usr/lib/realtimebattle/Robots/perl.robot
Binary-package: netmrg (0.20-1)
    file: /usr/bin/rrdedit
Binary-package: bulmages-servers (0.11.1-2)
    file: /usr/share/bulmages/examples/scripts/actualizabulmacont
    file: /usr/share/bulmages/examples/scripts/installbulmages-db
    file: /usr/share/bulmages/examples/scripts/creabulmafact
    file: /usr/share/bulmages/examples/scripts/creabulmacont
    file: /usr/share/bulmages/examples/scripts/actualizabulmafact
Binary-package: xastir (1.9.2-1)
    file: /usr/lib/xastir/get-maptools.sh
    file: /usr/lib/xastir/get_shapelib.sh
Binary-package: plait (1.5.2-1)
    file: /usr/bin/plaiter
    file: /usr/bin/plait
Binary-package: cdrw-taper (0.4-2)
    file: /usr/sbin/amlabel-cdrw
Binary-package: konwert-filters (1.8-11.1)
    file: /usr/share/konwert/filters/any-UTF8
Binary-package: gdrae (0.1-1)
    file: /usr/bin/gdrae
Binary-package: lazarus-src (0.9.24-0-9)
    file: /usr/lib/lazarus/tools/install/create_lazarus_export_tgz.sh

--- End Message ---
--- Begin Message ---
Source: ltp
Source-Version: 20081130+dfsg-3

We believe that the bug you reported is fixed in the latest version of
ltp, which is due to be installed in the Debian FTP archive:

  to pool/main/l/ltp/ltp-commands-test_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp-dev_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp-disc-test_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp-kernel-test_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp-misc-test_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp-network-test_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp-tools_20081130+dfsg-3_i386.deb
  to pool/main/l/ltp/ltp_20081130+dfsg-3.diff.gz
  to pool/main/l/ltp/ltp_20081130+dfsg-3.dsc
  to pool/main/l/ltp/ltp_20081130+dfsg-3_all.deb
  to pool/main/l/ltp/ltp_20081130+dfsg.orig.tar.gz

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 496411@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Jiri Palecek <jpalecek@web.de> (supplier of updated ltp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

Hash: SHA1

Format: 1.8
Date: Wed, 17 Dec 2008 10:29:55 +0100
Source: ltp
Binary: ltp-tools ltp-dev ltp-kernel-test ltp-network-test ltp-commands-test ltp-misc-test ltp-disc-test ltp
Architecture: source all i386
Version: 20081130+dfsg-3
Distribution: unstable
Urgency: low
Maintainer: Jiri Palecek <jpalecek@web.de>
Changed-By: Jiri Palecek <jpalecek@web.de>
 ltp        - The Linux Test Project test suite
 ltp-commands-test - Command tests for the Linux Test Project
 ltp-dev    - development files for Linux Test Project
 ltp-disc-test - Disk I/O tests for the Linux Test Project
 ltp-kernel-test - kernel tests for the Linux Test Project
 ltp-misc-test - Misc. tests for the Linux Test Project
 ltp-network-test - Network tests for the Linux Test Project
 ltp-tools  - Utilities for running the Linux Test Project test suite
Closes: 420148 470091 496411 496411
 ltp (20081130+dfsg-3) unstable; urgency=low
   * Correct preprocessor directives in signalfd testcase
 ltp (20081130+dfsg-2) unstable; urgency=low
   * Fix a syntax error in connectors makefile
   * Bump standards version to 3.8.0 (no changes needed; however, we
     don't support parallel=n)
 ltp (20081130+dfsg-1) experimental; urgency=low
   * New upstream version
   * Add README.Debian to all binary packages (closes: #496411)
   * Build-depend on autoconf, used to determine presence of some syscalls
   * Always build all controllers tests on Debian
   * Build the connectors tests too
   * Enable the controllers tests
   * Use dh_buildinfo while building
 ltp (20081031+dfsg-2) experimental; urgency=low
   * Deal with missing syscalls (causing FTBFS on alpha)
 ltp (20081031+dfsg-1) experimental; urgency=low
   * New upstream version
   * Delete an a.out file in eventfd Makefile (fixes FTBFS)
   * Don't depend on ncurses as we don't use it in the build process
   * Change the install rule to reflect upstream's installing into
     $(DESTDIR)/$(PREFIX) now
   * Suggest c-compiler and linux-libc-dev for the asapi test
   * Include the power management tests
   * Forward return values from children in some tests
 ltp (20080930+dfsg-1) experimental; urgency=low
   * New Upstream version 20080930
   * Don't depend on gawk, because the scripts have been updated not to
     need it.
   * Updated copyright for new version
   * Add a README.source file
   * Do not make stub definitions for syscalls, whose tests check for
     their presence with their own logic
   * Moved the include files back to /usr/include/ltp
   * Add a README.Debian file explainig the security status of the
     package (closes: 496411)
   * Correct the condition of compiling the timerfd test; should fix
     FTBFS with some kernel versions
   * Don't make utimensat01 setuid; remove sudo calls from
   * Recommend libcap2-bin in ltp-kernel-test, as the filecaps test needs
   * Implement a (hopefully) proper way of getting machine endiannes in
   * Compile and include the ltp-aiodio tests
   * Enabled ipv6_lib tests
 ltp (20080831+dfsg-2) experimental; urgency=low
   * Remove duplicate entries from .install files, change the logic for
     generating them
   * Add Vcs-* and Homepage fields to copyright and modify packages'
     description to include LTP description and a big warning
   * Add watch file
   * Fix some bashisms
 ltp (20080831+dfsg-1) experimental; urgency=low
   * New upstream version (closes: #420148)
   * Added some manpages
 ltp (20080731+dfsg-1) UNRELEASED; urgency=low
   * New upstream version
   * Build-Depends fixes
   * Fix permissions of ltp-dev files
   * Adapt copyright to new version
   * Don't run git-dch when importing upstream (hopefully)
   * Imported Upstream version 20080831
   * Remove cruft from .orig.tar.gz
   * Make clean target remove generated file
   * Changed dfsg-cleanup script to automatically solve merge conflicts
     on removed files in git
 ltp (20080630+dfsg-1) UNRELEASED; urgency=low
   * New upstream version
   * New maintainer (closes: #470091)
   * Add manual pages to ltp-dev (taken from upstream rpm ltp package)
   * Change ltp-dev install use the official install target. Also, move
     the include files to /usr/include and make the pkg-config file
   * Generate and package reference files from the maths tests
   * Delete the change_owner and creat_link binary, as it is an insecure suid
     root binary; rewrite tests that use it
   * Fixed syslog for use in Debian
   * Add $LTPTOOLS to PATH to find tst_resm and friends
   * Fixed some bashisms
   * Use nogroup instead of nobody for the name of the nobody user's
   * Build fixes
 bb9dd0a86d941db9f6fe59e88d13acaf2bb0d965 1293 ltp_20081130+dfsg-3.dsc
 9217d6e5610b187c75316bdd471017ff9f2f9c73 5898086 ltp_20081130+dfsg.orig.tar.gz
 02e6b68d5b275398f3545c8053d6ef31ea4c6737 54966 ltp_20081130+dfsg-3.diff.gz
 54c8ed041771dae2a17d2e7506bcb3c5a1024913 200208 ltp_20081130+dfsg-3_all.deb
 50ced406138b687cd781c8935a91f65665eb9c41 264940 ltp-tools_20081130+dfsg-3_i386.deb
 fb1235f045316578f6a48a6892ec197042d99315 259408 ltp-dev_20081130+dfsg-3_i386.deb
 f8778cf2c93427e4a833ab0c4c7e223f9bafed5c 4575176 ltp-kernel-test_20081130+dfsg-3_i386.deb
 5dacc54fbad99b6ab4ae53dcafa605a35ce483c7 677366 ltp-network-test_20081130+dfsg-3_i386.deb
 bcf61527b89fe008d82f2c6a2648cb96f9ec8739 246272 ltp-commands-test_20081130+dfsg-3_i386.deb
 f964d8148e79f2d52b949633a177775220f66851 6126508 ltp-misc-test_20081130+dfsg-3_i386.deb
 f2ee02da9e93c82da04443057e604e9074beb413 230084 ltp-disc-test_20081130+dfsg-3_i386.deb
 f9fa21c4d38cb0e2026ca1a3b03f41762b1410a47de427d4adc717cf990ca0bc 1293 ltp_20081130+dfsg-3.dsc
 1c6205eeaa0c6b41a7df9ad7474450302e79979b2bd3573504699a47fb48c2fc 5898086 ltp_20081130+dfsg.orig.tar.gz
 a526c8d91b25befb324ae123c0c102028c5ef6e6d4c91131e08eaae09b642790 54966 ltp_20081130+dfsg-3.diff.gz
 10331e449ded39227f0c2acc236d814189161dbafccff0eb1262eac0b92fed2b 200208 ltp_20081130+dfsg-3_all.deb
 771ca67dd9bb7a48ad2c72a0455836c879552d745214045de2959f5468044bc5 264940 ltp-tools_20081130+dfsg-3_i386.deb
 c3e87b2227a50bdf44931c442dc5dd8d9b55978c20a42116b389f09644a476b5 259408 ltp-dev_20081130+dfsg-3_i386.deb
 9758b47981535dd1a8c6bf60d92e0fd6928f6d64e69688708877ee96e3875d2d 4575176 ltp-kernel-test_20081130+dfsg-3_i386.deb
 49c57b927fd55059b1b90f6c0a3f26b389d395c45cb5d025e89c45f4e2b35c1b 677366 ltp-network-test_20081130+dfsg-3_i386.deb
 e1fc411e13242635a471f14d9479092c1ff6441bbec907074275baecbc83b02d 246272 ltp-commands-test_20081130+dfsg-3_i386.deb
 75947e356f446975bea0177af4928822c5688262135f182d98340ba49110597a 6126508 ltp-misc-test_20081130+dfsg-3_i386.deb
 f3bed4d5e7fdba0ade6ba245dc54b7557cac3a631f08af1b59a5fe645b3cf5d5 230084 ltp-disc-test_20081130+dfsg-3_i386.deb
 13a2f0bd467ed428feb4c6c6442987b8 1293 misc extra ltp_20081130+dfsg-3.dsc
 e0aeb4ee9ca486431dd0a8861c602369 5898086 misc extra ltp_20081130+dfsg.orig.tar.gz
 6d0fa15153a43ec2361370a0712e3c7c 54966 misc extra ltp_20081130+dfsg-3.diff.gz
 76838b4a08b4b93c64b947c93ef3a27f 200208 misc extra ltp_20081130+dfsg-3_all.deb
 60533a78c8e212effe3dc2f24e0fe202 264940 misc extra ltp-tools_20081130+dfsg-3_i386.deb
 a87c63fc8b2b09f821a549f3d57a8975 259408 misc extra ltp-dev_20081130+dfsg-3_i386.deb
 d8763d537f187ee9c49bdf81d91a33a3 4575176 misc extra ltp-kernel-test_20081130+dfsg-3_i386.deb
 4106664bb6299147d100de615fccad7e 677366 misc extra ltp-network-test_20081130+dfsg-3_i386.deb
 82f1417fd2e5d0f1ecaf93d2618bd077 246272 misc extra ltp-commands-test_20081130+dfsg-3_i386.deb
 8b341b66af8b938f061cb4b6e5a78348 6126508 misc extra ltp-misc-test_20081130+dfsg-3_i386.deb
 3e2f31a0301692927f8c34fafb79522e 230084 misc extra ltp-disc-test_20081130+dfsg-3_i386.deb

Version: GnuPG v1.4.9 (GNU/Linux)


--- End Message ---

Reply to: