[Webmin-maintainers] Bug#310838: marked as done ([CAN-2005-1177] erroneously changes permissions and ownership of configuration files)
Debian Bug Tracking System
owner@bugs.debian.org
Thu, 26 May 2005 17:03:19 -0700
Your message dated Thu, 26 May 2005 19:45:59 -0400 (EDT)
with message-id <Pine.LNX.4.63.0505261942580.13438@diku.intranet.braincells.com>
and subject line [Webmin-maintainers] Bug#310838: [CAN-2005-1177] erroneously changes permissions and ownership of configuration files
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 26 May 2005 10:29:56 +0000
>From martin@piware.de Thu May 26 03:29:56 2005
Return-path: <martin@piware.de>
Received: from mail01.pironet-ndh.com (mail02.pironet-ndh.com) [194.64.31.10]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DbFch-0000Yz-00; Thu, 26 May 2005 03:29:56 -0700
Received: from mail.fbn-dd.de (mail.fbn-dd.de [195.227.105.178])
by mail02.pironet-ndh.com (Postfix) with ESMTP id D616C487A5
for <submit@bugs.debian.org>; Thu, 26 May 2005 12:29:24 +0200 (CEST)
Received: from sonne.intranet.fbn-dd.de (192-168-0-1.transfer-000.intranet.fbn-dd.de [192.168.0.1])
by mail.fbn-dd.de (Postfix) with ESMTP id 7B34B15119
for <submit@bugs.debian.org>; Thu, 26 May 2005 12:29:24 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by sonne.intranet.fbn-dd.de (Postfix) with ESMTP id 5FB7F1F72D
for <submit@bugs.debian.org>; Thu, 26 May 2005 12:29:24 +0200 (CEST)
Received: from sonne.intranet.fbn-dd.de (localhost [127.0.0.1])
by localhost (AvMailGate-2.0.1.16) id 30862-7F064FB5;
Thu, 26 May 2005 12:29:24 +0200
Received: from localhost.localdomain (10-28-130-200.intranet-28-130.fbn-dd.de [10.28.130.200])
by sonne.intranet.fbn-dd.de (Postfix) with ESMTP id 422EE1F4FF
for <submit@bugs.debian.org>; Thu, 26 May 2005 12:29:24 +0200 (CEST)
Received: by localhost.localdomain (Postfix, from userid 1000)
id 9C21294A2; Thu, 26 May 2005 12:29:25 +0200 (CEST)
Date: Thu, 26 May 2005 12:29:25 +0200
From: Martin Pitt <mpitt@debian.org>
To: submit@bugs.debian.org
Subject: [CAN-2005-1177] erroneously changes permissions and ownership of configuration files
Message-ID: <20050526102925.GD13259@piware.de>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="V88s5gaDVPzZ0KCq"
Content-Disposition: inline
User-Agent: Mutt/1.5.9i
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.1.16; AVE: 6.30.0.15; VDF: 6.30.0.202; host: sonne)
Delivered-To: submit@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
--V88s5gaDVPzZ0KCq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Package: webmin
Version: 1.180-3
Severity: critical
Tags: security
Hi!
CAN-2005-1177 describes a bug in webmin that can cause the permissions
and ownerships of configuration files to be changed when the file is
modified. This is fixed in 1.200, see
http://www.webmin.com/changes.html
Can you please backport this fix?
Thanks,
Martin
--=20
Martin Pitt http://www.piware.de
Ubuntu Developer http://www.ubuntulinux.org
Debian Developer http://www.debian.org
--V88s5gaDVPzZ0KCq
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFClaUFDecnbV4Fd/IRAkoFAJ4kAY2XcjsA5O0AjpuXso86TT2XzgCeJkAn
7tHP637mbAz5HzCIedXYV/c=
=GEVr
-----END PGP SIGNATURE-----
--V88s5gaDVPzZ0KCq--
---------------------------------------
Received: (at 310838-done) by bugs.debian.org; 26 May 2005 23:46:40 +0000
>From jaldhar@debian.org Thu May 26 16:46:40 2005
Return-path: <jaldhar@debian.org>
Received: from atlmail.prod.rxgsys.com (bastet.signetmail.com) [69.61.70.25]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DbS3k-0000Xy-00; Thu, 26 May 2005 16:46:40 -0700
Received: from localhost (localhost.localdomain [127.0.0.1])
by bastet.signetmail.com (RXG Elite Mail Server) with ESMTP
id D4F42A879E; Thu, 26 May 2005 18:26:06 -0400 (EDT)
Received: from bastet.signetmail.com ([127.0.0.1])
by localhost (atlmail.prod.rxgsys.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 03542-07; Thu, 26 May 2005 18:26:02 -0400 (EDT)
Received: from mail.braincells.com (unknown [63.115.148.100])
by bastet.signetmail.com (RXG Elite Mail Server) with ESMTP
id B3C0BA8793; Thu, 26 May 2005 18:25:58 -0400 (EDT)
Received: from localhost (localhost [127.0.0.1])
by mail.braincells.com (Postfix) with ESMTP id D5CC4807F;
Thu, 26 May 2005 19:46:13 -0400 (EDT)
Received: from mail.braincells.com ([127.0.0.1])
by localhost (samadhi [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 02554-03; Thu, 26 May 2005 19:46:11 -0400 (EDT)
Received: from [149.123.132.44] (unknown [149.123.132.44])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mail.braincells.com (Postfix) with ESMTP id 9706E7F51;
Thu, 26 May 2005 19:46:10 -0400 (EDT)
Date: Thu, 26 May 2005 19:45:59 -0400 (EDT)
From: "Jaldhar H. Vyas" <jaldhar@debian.org>
X-X-Sender: jaldhar@diku.intranet.braincells.com
Reply-To: "Jaldhar H. Vyas" <jaldhar@debian.org>
To: Joey Hess <joeyh@debian.org>, 310838-done@bugs.debian.org
Cc: Martin Pitt <mpitt@debian.org>,
Debian Webmin maintainers <webmin-maintainers@lists.alioth.debian.org>
Subject: Re: [Webmin-maintainers] Bug#310838: [CAN-2005-1177] erroneously
changes permissions and ownership of configuration files
In-Reply-To: <20050526161005.GD4069@kitenet.net>
Message-ID: <Pine.LNX.4.63.0505261942580.13438@diku.intranet.braincells.com>
References: <20050526102925.GD13259@piware.de> <20050526161005.GD4069@kitenet.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at braincells.com
X-Virus-Scanned: by EMS at localhost.localdomain
Delivered-To: 310838-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER,
RCVD_IN_SBLXBL,RCVD_IN_SBLXBL_SBL autolearn=no
version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
On Thu, 26 May 2005, Joey Hess wrote:
>> CAN-2005-1177 describes a bug in webmin that can cause the permissions
>> and ownerships of configuration files to be changed when the file is
>> modified. This is fixed in 1.200, see
>>
>> http://www.webmin.com/changes.html
>>
>> Can you please backport this fix?
>
> According to this mailing list post, it only affects 1.190 and not the
> version in sarge.
>
> http://lists.debian.org/debian-release/2005/04/msg00185.html
That's correct. 1.180 doesn't even have the feature which triggers this
problem. So I'm closing it.
--
Jaldhar H. Vyas <jaldhar@debian.org>
La Salle Debain - http://www.braincells.com/debian/