Bug#63917: marked as done (get-news calls suck with password in commandline - visible eg. by ps)
Your message dated Thu, 08 Feb 2001 15:04:57 -0500
with message-id <E14QxJJ-0004OM-00@auric.debian.org>
and subject line Bug#63917: fixed in suck 4.2.5-3
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Darren Benham
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 10 May 2000 21:45:30 +0000
>From florz@gmx.de Wed May 10 16:45:30 2000
Received: from mail.gmx.net (mail3.gmx.net) [194.221.183.63]
by master.debian.org with smtp (Exim 3.12 #2 (Debian))
id 12peIM-0002EM-00; Wed, 10 May 2000 16:45:30 -0500
Received: (qmail 17196 invoked by uid 0); 10 May 2000 21:45:24 -0000
Received: from dialin-74190.ewetel.net (HELO florz.de) (212.6.74.190)
by mail.gmx.net with SMTP; 10 May 2000 21:45:24 -0000
Received: from florz by florz.de with local (Exim 2.05 #1 (Debian))
id 12peLg-0000cD-00; Wed, 10 May 2000 23:48:56 +0200
Date: Wed, 10 May 2000 23:48:55 +0200
From: Florian Zumbiehl <florz@gmx.de>
To: submit@bugs.debian.org
Subject: get-news calls suck with password in commandline - visible eg. by ps
Message-ID: <20000510234855.C1810@florz.de>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.95.3i
Delivered-To: submit@bugs.debian.org
Package: suck
Version: 3.10.1-3
When using get-news with authentication (password in the
config-file), get-news calls suck with password as parameter.
So, any user can see the password by ps for example.
I think that no additional information is needed since this
problem does not depend on hardware, libraries etc.
---------------------------------------
Received: (at 63917-close) by bugs.debian.org; 8 Feb 2001 20:07:19 +0000
>From troup@auric.debian.org Thu Feb 08 14:07:19 2001
Return-path: <troup@auric.debian.org>
Received: from auric.debian.org [::ffff:206.246.226.45]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 14QxLa-0002iK-00; Thu, 08 Feb 2001 14:07:18 -0600
Received: from troup by auric.debian.org with local (Exim 3.12 1 (Debian))
id 14QxJJ-0004OM-00; Thu, 08 Feb 2001 15:04:57 -0500
From: Tollef Fog Heen <tfheen@debian.org>
To: 63917-close@bugs.debian.org
Subject: Bug#63917: fixed in suck 4.2.5-3
Message-Id: <E14QxJJ-0004OM-00@auric.debian.org>
Sender: James Troup <troup@auric.debian.org>
Date: Thu, 08 Feb 2001 15:04:57 -0500
Delivered-To: 63917-close@bugs.debian.org
We believe that the bug you reported is fixed in the latest version of
suck, which has been installed in the Debian FTP archive:
suck_4.2.5-3.diff.gz
to pool/main/s/suck/suck_4.2.5-3.diff.gz
suck_4.2.5-3_i386.deb
to pool/main/s/suck/suck_4.2.5-3_i386.deb
suck_4.2.5-3.dsc
to pool/main/s/suck/suck_4.2.5-3.dsc
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 63917@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Tollef Fog Heen <tfheen@debian.org> (supplier of updated suck package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Sun, 4 Feb 2001 22:08:47 +0100
Source: suck
Binary: suck
Architecture: source i386
Version: 4.2.5-3
Distribution: unstable
Urgency: low
Maintainer: Tollef Fog Heen <tfheen@debian.org>
Changed-By: Tollef Fog Heen <tfheen@debian.org>
Description:
suck - Small newsfeed from an NNTP server with standard NNTP commands.
Closes: 63917 66089 66608 76752 80492 83401 83485
Changes:
suck (4.2.5-3) unstable; urgency=low
.
* Adopted the package (closes: #80492)
* Use custom options when fetching from all servers (closes: #66608)
* Make sure the post-download state files exist, using patch in 76752.
(closes: #76752)
* Added lmove (closes: #66089)
* get-news now puts the authentication stuff in the environment - small
patch for suck.c and rpost.c needed, forwarded upstream. (closes:
#63917)
* Changed from yada to debhelper
* Added some README files which weren't included before.
* Added Swedish, Norwegian and German translations to the debconf
template. (closes: #83401, #83485)
Files:
a2b1f289185a4c1c66192be990010215 604 news extra suck_4.2.5-3.dsc
b65cd68cc60d40d2e4f02729099bd1f2 14090 news extra suck_4.2.5-3.diff.gz
fd8cf091252873914e8f29ea6f8a5fb4 115232 news extra suck_4.2.5-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6gn01QSseMYF6mWoRAt9QAKDxAUSsJIsECwjOCe09MJAiGGB3+QCg3kWy
uemApqN5eHtmzq9zmFfylHQ=
=C/cL
-----END PGP SIGNATURE-----
Reply to: