Bug#278298: marked as done (tetex-bin is affected by CAN-2004-0888)
Your message dated Wed, 27 Oct 2004 13:17:32 -0400
with message-id <E1CMrQS-0005ok-00@newraff.debian.org>
and subject line Bug#278298: fixed in tetex-bin 2.0.2-23
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 25 Oct 2004 23:01:31 +0000
>From bunk@stusta.de Mon Oct 25 16:01:31 2004
Return-path: <bunk@stusta.de>
Received: from mailout.stusta.mhn.de [141.84.69.5]
by spohr.debian.org with smtp (Exim 3.35 1 (Debian))
id 1CMDqF-00027O-00; Mon, 25 Oct 2004 16:01:31 -0700
Received: (qmail 15296 invoked from network); 25 Oct 2004 23:01:30 -0000
Received: from r063144.stusta.swh.mhn.de (10.150.63.144)
by mailhub.stusta.mhn.de with SMTP; 25 Oct 2004 23:01:30 -0000
Received: by r063144.stusta.swh.mhn.de (Postfix, from userid 1000)
id 9AE45B000D; Tue, 26 Oct 2004 01:00:59 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Adrian Bunk <bunk@stusta.de>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: tetex-bin might be affected by CAN-2004-0889
X-Mailer: reportbug 2.63
Date: Tue, 26 Oct 2004 01:00:59 +0200
Message-Id: <[🔎] 20041025230059.9AE45B000D@r063144.stusta.swh.mhn.de>
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
Package: tetex-bin
Version: 2.0.2-22
Severity: grave
Tags: security
pdftohtml might be affected by CAN-2004-0889
(integer overflow issues in xpdf).
The code is there, but I haven't checked how it's actually used.
---------------------------------------
Received: (at 278298-close) by bugs.debian.org; 27 Oct 2004 17:24:37 +0000
>From katie@ftp-master.debian.org Wed Oct 27 10:24:37 2004
Return-path: <katie@ftp-master.debian.org>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CMrXJ-0001Am-00; Wed, 27 Oct 2004 10:24:37 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1CMrQS-0005ok-00; Wed, 27 Oct 2004 13:17:32 -0400
From: =?iso-8859-1?q?Frank_K=FCster?= <frank@debian.org>
To: 278298-close@bugs.debian.org
X-Katie: $Revision: 1.51 $
Subject: Bug#278298: fixed in tetex-bin 2.0.2-23
Message-Id: <E1CMrQS-0005ok-00@newraff.debian.org>
Sender: Archive Administrator <katie@ftp-master.debian.org>
Date: Wed, 27 Oct 2004 13:17:32 -0400
Delivered-To: 278298-close@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-5.0 required=4.0 tests=BAYES_00,DATING,
HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
X-CrossAssassin-Score: 4
Source: tetex-bin
Source-Version: 2.0.2-23
We believe that the bug you reported is fixed in the latest version of
tetex-bin, which is due to be installed in the Debian FTP archive:
libkpathsea-dev_2.0.2-23_i386.deb
to pool/main/t/tetex-bin/libkpathsea-dev_2.0.2-23_i386.deb
libkpathsea3_2.0.2-23_i386.deb
to pool/main/t/tetex-bin/libkpathsea3_2.0.2-23_i386.deb
tetex-bin_2.0.2-23.diff.gz
to pool/main/t/tetex-bin/tetex-bin_2.0.2-23.diff.gz
tetex-bin_2.0.2-23.dsc
to pool/main/t/tetex-bin/tetex-bin_2.0.2-23.dsc
tetex-bin_2.0.2-23_i386.deb
to pool/main/t/tetex-bin/tetex-bin_2.0.2-23_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 278298@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Frank Küster <frank@debian.org> (supplier of updated tetex-bin package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 27 Oct 2004 10:30:32 +0200
Source: tetex-bin
Binary: libkpathsea3 tetex-bin libkpathsea-dev
Architecture: source i386
Version: 2.0.2-23
Distribution: unstable
Urgency: high
Maintainer: teTeX maintainers <debian-tetex-maint@lists.debian.org>
Changed-By: Frank Küster <frank@debian.org>
Description:
libkpathsea-dev - path search library for teTeX (devel part)
libkpathsea3 - path search library for teTeX (runtime part)
tetex-bin - The teTeX binary files
Closes: 273244 273712 274439 278298
Changes:
tetex-bin (2.0.2-23) unstable; urgency=high
.
* Security fix for the xpdf code included in pdftex. Many thanks to
Adrian Bunk <bunk@stusta.de> and Martin Schulze <joey@infodrom.org>
(closes: #278298) [frank]
* Do not discard the font cache when updating from woody [frank]
* Fix typo in dvips manpage (closes: #274439) [frank]
* Change wording of a diagnostic message of update-texmf, and add a
--debug option (closes: #273244) [frank]
* Translations:
- added czech translation, thanks to Miroslav Kure
<kurem@upcase.inf.upol.cz> (closes: #273712) [frank]
Files:
42d47af525643b0cb3ec85e0d0b10aca 1044 tex optional tetex-bin_2.0.2-23.dsc
169e201f6959029c9b4e61461d043785 156532 tex optional tetex-bin_2.0.2-23.diff.gz
bf6d078fd2101c999b8e2bf366ba7fdf 3929728 tex optional tetex-bin_2.0.2-23_i386.deb
85dee92b5d61072220cedbe74a9eb3c5 57266 libs optional libkpathsea3_2.0.2-23_i386.deb
77e6c62e4a7bd321a5e87534de470116 66252 libdevel optional libkpathsea-dev_2.0.2-23_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBf54g+xs9YyJS+hoRAqMTAJ4wmTrR46LlccV1o6v/aouUhsC8IwCeOWDT
X5dUUttyS6zdWMNd1a9sxi4=
=Mt8w
-----END PGP SIGNATURE-----
Reply to: