CVE-2017-5930

Debian Bug report logs - #854742
CVE-2017-5930

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CVE-2017-5930

Date: Fri, 10 Feb 2017 00:20:41 +0100

Package: postfixadmin
Severity: grave
Tags: security

Please see http://seclists.org/oss-sec/2017/q1/345

Cheers,
        Moritz

Message #10 received at 854742-close@bugs.debian.org (full text, mbox, reply):

From: Christoph Martin <martin@uni-mainz.de>

To: 854742-close@bugs.debian.org

Subject: Bug#854742: fixed in postfixadmin 3.0.2-1

Date: Fri, 10 Feb 2017 15:03:45 +0000

Source: postfixadmin
Source-Version: 3.0.2-1

We believe that the bug you reported is fixed in the latest version of
postfixadmin, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 854742@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christoph Martin <martin@uni-mainz.de> (supplier of updated postfixadmin package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 10 Feb 2017 15:08:46 +0100
Source: postfixadmin
Binary: postfixadmin
Architecture: source all
Version: 3.0.2-1
Distribution: unstable
Urgency: high
Maintainer: Norman Messtorff <normes@normes.org>
Changed-By: Christoph Martin <martin@uni-mainz.de>
Description:
 postfixadmin - Virtual mail hosting interface for Postfix
Closes: 780418 854742
Changes:
 postfixadmin (3.0.2-1) unstable; urgency=high
 .
   [ David Goodwin ]
   * Security fix (don't delete protected aliases, CVE-2017-5930) (closes: #854742)
   * Fix MySQL vacation.cache column (regression fix)
 .
   [ Christoph Martin ]
   * remove recommends zendframework (closes: #780418)
 .
 postfixadmin (3.0.1-2) unstable; urgency=low
 .
   * Try and make dependencies less strict (and perhaps work for Ubuntu Precise as well)
 .
 postfixadmin (3.0.1-1) unstable; urgency=low
 .
   * Fix packaging issues (missing: smarty/ and configs/)
Checksums-Sha1:
 6ed098a1208deed866882d252fd1691fab01011f 1976 postfixadmin_3.0.2-1.dsc
 9ff44f7885f153ce9f6aa78e131d24c36088a302 1306500 postfixadmin_3.0.2.orig.tar.gz
 fdfc4c7067723204ca4fb94626327f4e490d4e62 7084 postfixadmin_3.0.2-1.debian.tar.xz
 558427f59ec900e15879f635f987235276506cfa 1014746 postfixadmin_3.0.2-1_all.deb
 0037514c76c6fe7c5e6713d8b69d439119411cbb 5766 postfixadmin_3.0.2-1_amd64.buildinfo
Checksums-Sha256:
 ec986fef4c3d922b13f3259499d311e2090add8821d015c50bd7e97dfa12da64 1976 postfixadmin_3.0.2-1.dsc
 9a4edb111258c90912aea66ad1dd684445b4f03f08f8549b9d708336ae019c8c 1306500 postfixadmin_3.0.2.orig.tar.gz
 f3a3ff9ad958f3a4eb4d7b61827c408035e9831d8161a9e2c17869dea366cc17 7084 postfixadmin_3.0.2-1.debian.tar.xz
 066d4d85f4386b82d7ccdf9adb1d813b51e7ea80f5c2661ba87abd24ef65ec9d 1014746 postfixadmin_3.0.2-1_all.deb
 cc09de90afe9f7ff07ea8207ee91d35a2a38b2e3b4847eaac592a50921f1d4ec 5766 postfixadmin_3.0.2-1_amd64.buildinfo
Files:
 37e81a4b77a2e6e1e054f0f7ad79dca8 1976 admin optional postfixadmin_3.0.2-1.dsc
 84fd489199832cb40af8315c0cb3ad4f 1306500 admin optional postfixadmin_3.0.2.orig.tar.gz
 2affb68fabff3f8ad302a0f726c8ddcc 7084 admin optional postfixadmin_3.0.2-1.debian.tar.xz
 41c893f67c3c9410bbf2c21614c740fc 1014746 admin optional postfixadmin_3.0.2-1_all.deb
 37beed0b02fe4e392d54eea06bd058e0 5766 admin optional postfixadmin_3.0.2-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=LOPw
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.