Bug#1072589: marked as done (RM: phppgadmin -- RoM; security issues in bullseye)

To: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
Subject: Bug#1072589: marked as done (RM: phppgadmin -- RoM; security issues in bullseye)
From: "Debian Bug Tracking System" <owner@bugs.debian.org>
Date: Sat, 29 Jun 2024 09:39:11 +0000
Message-id: <[🔎] handler.1072589.D1072589.17196538031161027.ackdone@bugs.debian.org>
Reply-to: 1072589@bugs.debian.org
References: <E1sNUVd-007llT-BV@fasolo.debian.org> <[🔎] CAGEayXM-Sa1Eb74KWjg8okJVoBLxwr_PYEw5Q-EE6fC5a4xbcw@mail.gmail.com>

Your message dated Sat, 29 Jun 2024 09:36:41 +0000
with message-id <E1sNUVd-007llT-BV@fasolo.debian.org>
and subject line Bug#1072589: Removed package(s) from bullseye
has caused the Debian Bug report #1072589,
regarding RM: phppgadmin -- RoM; security issues in bullseye
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1072589: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072589
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

--- Begin Message ---

To: submit@bugs.debian.org
Subject: RM: phppgadmin -- RoM; security issues in bullseye
From: Leandro Cunha <leandrocunha016@gmail.com>
Date: Tue, 4 Jun 2024 19:55:32 -0300
Message-id: <[🔎] CAGEayXM-Sa1Eb74KWjg8okJVoBLxwr_PYEw5Q-EE6fC5a4xbcw@mail.gmail.com>

Package: release.debian.org
Control: affects -1 + src:phppgadmin
X-Debbugs-Cc: phppgadmin@packages.debian.org
User: release.debian.org@packages.debian.org
Usertags: rm
X-Debbugs-Cc: leandrocunha016@gmail.com
Severity: normal

Reason and request

As cited by Moritz Mühlenhoff from the Debian Security Team, as part
of bug #1072300 to remove phpPgAdmin version 7.13.0+dfsg-2 present in
bullseye and bookworm. Unlike the bookworm it would only be due to
CVEs without DSA. The user can connect to PostgreSQL normally. But
this bug is for the bullseye (oldoldstable) Debian version.

Bugs and CVEs

phppgadmin: CVE-2023-40619
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1053004

phppgadmin: CVE-2019-10784
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953945

NOTE: With these two serious CVEs, the package was removed from
testing because they were release critical bugs and this made me ask
to upload version 7.14.7+dfsg-1 to unstable and later to testing.

[1] https://security-tracker.debian.org/tracker/source-package/phppgadmin
[2] https://tracker.debian.org/pkg/phppgadmin
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072300

-- 
Cheers,
Leandro Cunha

--- End Message ---

--- Begin Message ---

To: 1072589-close@bugs.debian.org
Subject: Bug#1072589: Removed package(s) from bullseye
From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
Date: Sat, 29 Jun 2024 09:36:41 +0000
Message-id: <E1sNUVd-007llT-BV@fasolo.debian.org>

We believe that the bug you reported is now fixed; the following
package(s) have been removed from bullseye:

phppgadmin | 7.13.0+dfsg-2 | source, all

------------------- Reason -------------------
RoM; security issues in bullseye
----------------------------------------------

Note that the package(s) have simply been removed from the tag
database and may (or may not) still be in the pool; this is not a bug.
The package(s) will be physically removed automatically when no suite
references them (and in the case of source, when no binary references
it).  Please also remember that the changes have been done on the
master archive and will not propagate to any mirrors until the next
dinstall run at the earliest.

Packages are usually not removed from testing by hand. Testing tracks
unstable and will automatically remove packages which were removed
from unstable when removing them from testing causes no dependency
problems. The release team can force a removal from testing if it is
really needed, please contact them if this should be the case.

Bugs which have been reported against this package are not automatically
removed from the Bug Tracking System.  Please check all open bugs and
close them or re-assign them to another package if the removed package
was superseded by another one.

The version of this package that was in Debian prior to this removal
can still be found using https://snapshot.debian.org/.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1072589@bugs.debian.org.

The full log for this bug can be viewed at https://bugs.debian.org/1072589

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Archive Administrator (the ftpmaster behind the curtain)

Attachment: pgprzKAgvgxeu.pgp
Description: PGP signature

--- End Message ---

Reply to:

References:
- Bug#1072589: RM: phppgadmin -- RoM; security issues in bullseye
  - From: Leandro Cunha <leandrocunha016@gmail.com>

Prev by Date: Bug#1070199: marked as done (RM: pytest-testinfra -- RoST; only needed for to-be-removed salt)
Next by Date: Bug#1036083: marked as done (bullseye-pu: package galera-4 26.4.18-0+deb11u1)
Previous by thread: Bug#1072589: RM: phppgadmin -- RoM; security issues in bullseye
Next by thread: Bug#1072626: bookworm-pu: package rust-cbindgen-web/0.26.0-3~deb12u1
Index(es):
- Date
- Thread