Your message dated Fri, 16 Sep 2005 17:58:30 +0200 with message-id <200509161758.32488.pvaneynd@debian.org> and subject line Bug#328633: common-lisp-controller: Security upload for CAN-2005-2657? has caused the attached Bug report to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database) -------------------------------------- Received: (at submit) by bugs.debian.org; 16 Sep 2005 14:04:24 +0000

From micah@riseup.net Fri Sep 16 07:04:21 2005 Return-path: <micah@riseup.net> Received: from mail.riseup.net [69.90.134.155] by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1EGGpB-0003tO-00; Fri, 16 Sep 2005 07:04:21 -0700 Received: from localhost (localhost [127.0.0.1]) by mail.riseup.net (Postfix) with ESMTP id 574C6A31F7; Fri, 16 Sep 2005 07:04:14 -0700 (PDT) Received: from mail.riseup.net ([127.0.0.1]) by localhost (buffy [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 31018-38; Fri, 16 Sep 2005 07:04:14 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.riseup.net (Postfix) with ESMTP id B290BA31EF; Fri, 16 Sep 2005 07:04:13 -0700 (PDT) Received: by pond (Postfix, from userid 1000) id D6D343A81F; Fri, 16 Sep 2005 00:36:41 -0400 (EDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: Micah Anderson <micah@riseup.net> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: common-lisp-controller: Security upload for CAN-2005-2657? X-Mailer: reportbug 3.17 Date: Fri, 16 Sep 2005 00:36:41 -0400 X-Debbugs-Cc: Debian Security Team <team@security.debian.org> Message-Id: <20050916043641.D6D343A81F@pond> X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at riseup.net Delivered-To: submit@bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-10.3 required=4.0 tests=BAYES_00,DATE_IN_PAST_06_12, HAS_PACKAGE,X_DEBBUGS_CC autolearn=ham version=2.60-bugs.debian.org_2005_01_02

Package: common-lisp-controller Version: 4.16 Severity: normal Tags: security Hi, I notice that in DSA-811-1[1] that common-lisp-controller has a fix for CAN-2005-2657 uploaded into stable, and the upload that is recorded as fixing this issue in unstable is for version 4.18[2]. However, there has not been an upload to unstable since 4.16 on 8/3/05. Do you anticipate uploading a fix to unstable soon? Or is the fixed version actually 4.16 and the DSA is incorrect? Thanks, Micah 1. http://www.debian.org/security/2005/dsa-811 2. "For the unstable distribution (sid) this problem has been fixed in version 4.18." -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing'), (500, 'unstable') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.8-2-k7 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) --------------------------------------- Received: (at 328633-done) by bugs.debian.org; 16 Sep 2005 15:58:35 +0000

From pvaneynd@debian.org Fri Sep 16 08:58:35 2005 Return-path: <pvaneynd@debian.org> Received: from out4.smtp.messagingengine.com [66.111.4.28] by spohr.debian.org with esmtp (Exim 3.36 1 (Debian)) id 1EGIbj-0006X3-00; Fri, 16 Sep 2005 08:58:35 -0700 Received: from frontend1.internal (mysql-sessions.internal [10.202.2.149]) by frontend1.messagingengine.com (Postfix) with ESMTP id 46C81CCFEE8; Fri, 16 Sep 2005 11:58:34 -0400 (EDT) Received: from frontend2.messagingengine.com ([10.202.2.151]) by frontend1.internal (MEProxy); Fri, 16 Sep 2005 11:58:34 -0400 X-Sasl-enc: rfZuGBBvHihKPLShsi91MdyiAKw7l/NdD/YzDi7YdsTL 1126886313 Received: from sharrow (196-56.240.81.adsl.skynet.be [81.240.56.196]) by frontend2.messagingengine.com (Postfix) with ESMTP id 62D5A570360; Fri, 16 Sep 2005 11:58:33 -0400 (EDT) From: Peter Van Eynde <pvaneynd@debian.org> To: Micah Anderson <micah@riseup.net>, 328633-done@bugs.debian.org Subject: Re: Bug#328633: common-lisp-controller: Security upload for CAN-2005-2657? Date: Fri, 16 Sep 2005 17:58:30 +0200 User-Agent: KMail/1.7.2 References: <20050916043641.D6D343A81F@pond> In-Reply-To: <20050916043641.D6D343A81F@pond> Organization: Debian MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200509161758.32488.pvaneynd@debian.org> Delivered-To: 328633-done@bugs.debian.org X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 (1.212-2003-09-23-exp) on spohr.debian.org X-Spam-Level: X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER autolearn=no version=2.60-bugs.debian.org_2005_01_02

On Friday 16 September 2005 06:36, Micah Anderson wrote:

However, there has not been an upload to unstable since 4.16 on 8/3/05. Do you anticipate uploading a fix to unstable soon? Or is the fixed version actually 4.16 and the DSA is incorrect?

Oeps. I was under the mistaken impression the security team would also upload the unstable version. I uploaded it now. Thanks for the report. Groetjes, Peter -- signature -at- pvaneynd.mailworks.org http://www.livejournal.com/users/pvaneynd/ "God, root, what is difference?" Pitr | "God is more forgiving." Dave Aronson|