[Bug 268413] [NEW] Please sync havp 0.89-1 (universe) from Debian unstable (main).

Launchpad Bug Tracker 268413 at bugs.launchpad.net
Wed Sep 10 04:21:18 BST 2008


You have been subscribed to a public bug by Scott Kitterman (kitterman):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/havp
 status confirmed
 importance wishlist
 subscribe ubuntu-archive

Please sync havp 0.89-1 (universe) from Debian unstable (main).

Supports libclamav5 transition:

Changelog since current intrepid version 0.88-1.1:

havp (0.89-1) unstable; urgency=high

  Justification for urgency high: compiles with new libclamav-dev and
  therefore fixes FTBFS for Lenny,
  * New upstream release. This includes the fix for the potential DoS
    issue. Therefore, remove 
    debian/patches/05_bts496034_CVE-2008-3688_fix_infinite_retry.dpatch.
    The new upstream version has another small bugfix (sending Via:
    header) but no additional changes and is therefore safe for Lenny.
    Closes: #496034: CVE-2008-3688: DoS by infinite loop
    Closes: #498338: havp depends on old clamav. This clamav version is 
                     vulnerable.
  * Acknowledge NMU:
    Closes: #492235: havp: does not delete temp files
    Closes: #492236: havp: can't install if port 8080 in use
    Closes: #487598: [INTL:sv] Swedish translation of debconf templates

 -- Rene Mayrhofer <rene.mayrhofer at gibraltar.at>  Tue, 09 Sep 2008
19:40:53 +0200

havp (0.88-2) UNRELEASED; urgency=low

  * Support reload command in init script, and thus make log rotation
    work without interruption.

 -- Rene Mayrhofer <rene.mayrhofer at gibraltar.at>  Sun, 15 Jun 2008
23:53:06 +0200


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.7 (GNU/Linux)

iD4DBQFIxzybHajaM93NaGoRAtZ8AJ4jvd0Gx/sIDYihCCsxKqkB1+vsAgCXQFpJ
LemyM/bVovK+gE66pTfcHA==
=XUEQ
-----END PGP SIGNATURE-----

** Affects: havp (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Please sync havp 0.89-1 (universe) from Debian unstable (main).
https://bugs.launchpad.net/bugs/268413
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list