Bug#1001849: marked as done (bullseye-pu: package glewlwyd/2.5.2-2+deb11u1)
Your message dated Fri, 24 Dec 2021 16:17:08 +0000
with message-id <E1n0nFk-000I9K-Kp@fasolo.debian.org>
and subject line Bug#1001849: fixed in glewlwyd 2.5.2-2+deb11u2
has caused the Debian Bug report #1001849,
regarding bullseye-pu: package glewlwyd/2.5.2-2+deb11u1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
1001849: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1001849
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
Tags: bullseye
User: release.debian.org@packages.debian.org
Usertags: pu
[ Reason ]
A bug has been fixed in Glewlwyd 2.6.1 to avoid possible possible privilege
escalation
[ Impact ]
Users accounts might be compromised
[ Changes ]
Remove a misplaced session update in the source code
CVE request has been filed, await for response
--- End Message ---
--- Begin Message ---
Source: glewlwyd
Source-Version: 2.5.2-2+deb11u2
Done: Nicolas Mora <babelouest@debian.org>
We believe that the bug you reported is fixed in the latest version of
glewlwyd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1001849@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Nicolas Mora <babelouest@debian.org> (supplier of updated glewlwyd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 17 Dec 2021 07:51:46 -0500
Source: glewlwyd
Architecture: source
Version: 2.5.2-2+deb11u2
Distribution: bullseye
Urgency: medium
Maintainer: Debian IoT Maintainers <debian-iot-maintainers@lists.alioth.debian.org>
Changed-By: Nicolas Mora <babelouest@debian.org>
Closes: 1001849
Changes:
glewlwyd (2.5.2-2+deb11u2) bullseye; urgency=medium
.
* d/patches: Fix possible privilege escalation (Closes: #1001849)
Checksums-Sha1:
3cd0fc3c79fee7aba02b8c9eeaf0ffe27444cf39 2604 glewlwyd_2.5.2-2+deb11u2.dsc
84fdbd7b288dabe6e683af2c5f18031206693604 5437175 glewlwyd_2.5.2.orig.tar.gz
d1ce4f432a488e7402127cad90ccdf2e13cd6405 23680 glewlwyd_2.5.2-2+deb11u2.debian.tar.xz
fc7e61eee1cde258a10a08900c53d9e2928a1d16 19221 glewlwyd_2.5.2-2+deb11u2_amd64.buildinfo
Checksums-Sha256:
54b04de99645e7b64171f8fef3d1cdd434ab8d731aedaf75ffe34f1754ed6f6d 2604 glewlwyd_2.5.2-2+deb11u2.dsc
2630d4e3ea2350c7060ff39321ff7e0cbef5893b9bd99ad098fc5fafba31fe4f 5437175 glewlwyd_2.5.2.orig.tar.gz
e4af995c85efadbddaa61c4fe2de83766ada0cf980b462b785ba89fd36ecb3bc 23680 glewlwyd_2.5.2-2+deb11u2.debian.tar.xz
9823d1660dbd789db6cc41e34b36c106b988738ed539b9447941d93a0f27e6f4 19221 glewlwyd_2.5.2-2+deb11u2_amd64.buildinfo
Files:
e1d932480af48e2d44a1fed05c1e95bd 2604 web optional glewlwyd_2.5.2-2+deb11u2.dsc
fa6d6f99894aae2b0e16a36e9322f4a8 5437175 web optional glewlwyd_2.5.2.orig.tar.gz
375658a8cb325ee47ddc367545af75ec 23680 web optional glewlwyd_2.5.2-2+deb11u2.debian.tar.xz
58eb5d33d432a1f5124405eaee0d9aab 19221 web optional glewlwyd_2.5.2-2+deb11u2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=pdIE
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: