Debian Bug report logs - #613204
Two security issues

Package: tsclient; Maintainer for tsclient is (unknown);

Reported by: Moritz Muehlenhoff <jmm@debian.org>

Date: Sun, 13 Feb 2011 14:06:01 UTC

Severity: grave

Tags: security

Fixed in version 0.150-4+rm

Done: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>:
Bug#613204; Package tsclient. (Sun, 13 Feb 2011 14:06:04 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Muehlenhoff <jmm@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>. (Sun, 13 Feb 2011 14:06:04 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

Package: tsclient
Severity: grave
Tags: security

Please see 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0900
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0901

Since these attacks require someone into opening a malformed
RDP file, I don't think these warrant a DSA. They could still
be fixed through a point release.

Cheers,
        Moritz

-- System Information:
Debian Release: 6.0
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Reply sent to Debian FTP Masters <ftpmaster@ftp-master.debian.org>:
You have taken responsibility. (Sun, 13 Feb 2011 23:18:38 GMT) (full text, mbox, link).

Notification sent to Moritz Muehlenhoff <jmm@debian.org>:
Bug acknowledged by developer. (Sun, 13 Feb 2011 23:18:39 GMT) (full text, mbox, link).

Message #10 received at 613204-done@bugs.debian.org (full text, mbox, reply):

Version: 0.150-4+rm

Dear submitter,

as the package tsclient has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see http://bugs.debian.org/547314

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@debian.org.

Debian distribution maintenance software
pp.
Luca Falavigna (the ftpmaster behind the curtain)

Added tag(s) squeeze and lenny. Request was from Jonathan Wiltshire <jmw@debian.org> to control@bugs.debian.org. (Mon, 14 Feb 2011 14:45:15 GMT) (full text, mbox, link).

Removed tag(s) squeeze. Request was from Kurt Roeckx <kurt@roeckx.be> to control@bugs.debian.org. (Wed, 16 Feb 2011 19:51:23 GMT) (full text, mbox, link).

Removed tag(s) lenny. Request was from Kurt Roeckx <kurt@roeckx.be> to control@bugs.debian.org. (Wed, 16 Feb 2011 20:12:23 GMT) (full text, mbox, link).

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Thu, 17 Mar 2011 07:31:04 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 03:54:08 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #613204 Two security issues

Debian Bug report logs - #613204
Two security issues