Debian Bug report logs - #294352
ITP: wmfrog -- A dockapp for showing weather in graphical way

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Reported by: Jari Aalto <jari.aalto@cante.net>

Date: Wed, 9 Feb 2005 11:18:04 UTC

Owned by: jari aalto <jari.aalto@cante.net>

Severity: wishlist

Merged with 352353

Done: David Moreno Garza <damog@merkel.debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>:
Bug#294352; Package wnpp. (full text, mbox, link).


Acknowledgement sent to Jari Aalto <jari.aalto@cante.net>:
New Bug report received and forwarded. Copy sent to <wnpp@debian.org>. (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Jari Aalto <jari.aalto@cante.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: RFP: wmfrog -- weather dockapp for use in Window Maker or blakbox/fluxbox
Date: Wed, 09 Feb 2005 13:13:39 +0200
Package: wnpp
Severity: wishlist


* Package name    : wmfrog
  Version         : 0.1.6
  Upstream Author : <tcolar@qarbon.dot.com>
* URL             : http://freshmeat.net/projects/wmfrog/
* License         : GPL
  Description     : weather dockapp for use in Window Maker or blakbox/fluxbox

(Include the long description here.)

wmFrog is a weather dockapp for use in Window Maker or
blakbox/fluxbox. It shows the cloud cover (sunny, partly cloudy.
etc.), precipitation (snow, light rain, etc.) the temperature, the
wind direction/speed, and the humidity.

The homepage with pictures is at

http://www.colar.net/wmapps/

Debian port that could be used as a base is available at

http://gulus.usherbrooke.ca/debian/pool/main/w/wmfrog/

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.9-1-686
Locale: LANG=C, LC_CTYPE=C (charmap=ISO-8859-1) (ignored: LC_ALL set to en_US)



Information forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>:
Bug#294352; Package wnpp. (full text, mbox, link).


Acknowledgement sent to Stefan Fritsch <sf@sfritsch.de>:
Extra info received and forwarded to list. Copy sent to <wnpp@debian.org>. (full text, mbox, link).


Message #10 received at 294352@bugs.debian.org (full text, mbox, reply):

From: Stefan Fritsch <sf@sfritsch.de>
To: 294352@bugs.debian.org
Subject: CAN-2004-2473 symlink vulnerability
Date: Sun, 21 Aug 2005 23:43:11 +0200
If wmFrog is ever packaged vor Debian, care should be taken that
CAN-2004-2473 is fixed:
"wmFrog weather monitor 0.1.6 allows local users to overwrite 
arbitrary files via a symlink attack on temporary files."

See http://xforce.iss.net/xforce/xfdb/18232



Information forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>:
Bug#294352; Package wnpp. (full text, mbox, link).


Acknowledgement sent to Joey Hess <joeyh@debian.org>:
Extra info received and forwarded to list. Copy sent to <wnpp@debian.org>. (full text, mbox, link).


Message #15 received at 294352@bugs.debian.org (full text, mbox, reply):

From: Joey Hess <joeyh@debian.org>
To: Stefan Fritsch <sf@sfritsch.de>, 294352@bugs.debian.org
Subject: Re: Bug#294352: CAN-2004-2473 symlink vulnerability
Date: Sun, 21 Aug 2005 21:05:40 -0400
[Message part 1 (text/plain, inline)]
Stefan Fritsch wrote:
> If wmFrog is ever packaged vor Debian, care should be taken that
> CAN-2004-2473 is fixed:
> "wmFrog weather monitor 0.1.6 allows local users to overwrite 
> arbitrary files via a symlink attack on temporary files."
> 
> See http://xforce.iss.net/xforce/xfdb/18232

Actually that hole I found was the reason it was removed from Debian,
iirc. :-)

-- 
see shy jo
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, <wnpp@debian.org>:
Bug#294352; Package wnpp. (full text, mbox, link).


Acknowledgement sent to Stefan Fritsch <sf@sfritsch.de>:
Extra info received and forwarded to list. Copy sent to <wnpp@debian.org>. (full text, mbox, link).


Message #20 received at 294352@bugs.debian.org (full text, mbox, reply):

From: Stefan Fritsch <sf@sfritsch.de>
To: 294352@bugs.debian.org
Subject: Re: Bug#294352: CAN-2004-2473 symlink vulnerability
Date: Mon, 22 Aug 2005 21:50:19 +0200
I didn't notice, but now I found the reasoning:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=282656;msg=7;archive=yes

Stefan



Changed Bug title. Request was from Thomas Huriaux <thomas.huriaux@gmail.com> to control@bugs.debian.org. (full text, mbox, link).


Owner recorded as jari aalto <jari.aalto@cante.net>. Request was from Thomas Huriaux <thomas.huriaux@gmail.com> to control@bugs.debian.org. (full text, mbox, link).


Merged 294352 352353. Request was from Thomas Huriaux <thomas.huriaux@gmail.com> to control@bugs.debian.org. (full text, mbox, link).


Tags added: pending Request was from Jari Aalto <jari.aalto@cante.net> to control@bugs.debian.org. (full text, mbox, link).


Message #29 received at 294352-done@bugs.debian.org (full text, mbox, reply):

From: David Moreno Garza <damog@merkel.debian.org>
To: 294352-done@bugs.debian.org
Subject: WNPP bug closing
Date: Sat, 16 Jun 2007 11:59:39 -0600
Hello,

This is an automatic mail sent to close the ITP you have reported or 
are involved with.

Your ITP wnpp bug is being closed because of the following reasons:
- It is, as of today, older than 365 days.
- It hasn't had any activity recently.

As this is an automatic procedure, it could of course have something
wrong and probably it would be closing some bugs that are not 
intended by owners and submitters (like you) to be closed, for
example if the ITP is still of your interest, or there has been 
some kind of activity around it. In that case, please reopen the
bug, do it, DO IT NOW! (I don't want to be blamed because of
mass closing and not let people know that they can easily reopen
their bugs ;-).

To re-open it, you simply have to mail control@bugs.debian.org
with a body text like this:

 reopen 294352
 stop

Further comments on the work done in the bug sent to
294352@bugs.debian.org would be truly welcomed.
Anyway, if you have any kind of problems when dealing with
the BTS, feel free to contact me and I'd be more than happy to help
you on this: <damog@debian.org>.

A similar process is being applied to other kind of wnpp bugs.

Thanks for your cooperation,

 -- David Moreno Garza <damog@debian.org>.
 



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 15 Jul 2007 07:29:20 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Apr 19 10:17:25 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.