Debian Bug report logs - #639132
php5: crypt() returns only the salt for MD5

version graph

Package: php5; Maintainer for php5 is (unknown);

Reported by: William Dauchy <wdauchy@gmail.com>

Date: Wed, 24 Aug 2011 12:45:05 UTC

Severity: normal

Tags: sid

Fixed in version 5.3.7-1

Done: Ondřej Surý <ondrej@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>:
Bug#639132; Package php5. (Wed, 24 Aug 2011 12:45:12 GMT) (full text, mbox, link).


Acknowledgement sent to William Dauchy <wdauchy@gmail.com>:
New Bug report received and forwarded. Copy sent to Debian PHP Maintainers <pkg-php-maint@lists.alioth.debian.org>. (Wed, 24 Aug 2011 12:45:13 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: William Dauchy <wdauchy@gmail.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: php5: crypt() returns only the salt for MD5
Date: Wed, 24 Aug 2011 14:43:31 +0200
Package: php5
Severity: normal
Tags: sid

The bug has been reported [1] upstream and fixed in php 5.3.8 [2].

[1] https://bugs.php.net/bug.php?id=55439
[2] http://www.php.net/archive/2011.php#id2011-08-23-1

This bug report will prevent php 5.3.7 to be accepted in testing.
-- 
William




Reply sent to Ondřej Surý <ondrej@debian.org>:
You have taken responsibility. (Wed, 24 Aug 2011 13:21:09 GMT) (full text, mbox, link).


Notification sent to William Dauchy <wdauchy@gmail.com>:
Bug acknowledged by developer. (Wed, 24 Aug 2011 13:21:10 GMT) (full text, mbox, link).


Message #10 received at 639132-done@bugs.debian.org (full text, mbox, reply):

From: Ondřej Surý <ondrej@debian.org>
To: William Dauchy <wdauchy@gmail.com>, 639132-done@bugs.debian.org
Subject: Re: [php-maint] Bug#639132: php5: crypt() returns only the salt for MD5
Date: Wed, 24 Aug 2011 15:17:53 +0200
Version: 5.3.7-1

And php5 in Debian is... not affected, because we patch PHP5 to use
system crypt(). Unfortunately I was not able to respond before you
filled the bug.

I'm sorry that Lior Kaplan has told you to fill the bug, since he
asked about it yesterday (or day before) and I already told him that
the php5 in Debian is not affected. So I quite don't understand why he
responded the way he did.

I would advice to wait for the maintainer response (you can find the
list in the Maintainer and/or Uploaders field) next time when asking
whether to fill the bug or not.

O.

On Wed, Aug 24, 2011 at 14:43, William Dauchy <wdauchy@gmail.com> wrote:
> Package: php5
> Severity: normal
> Tags: sid
>
> The bug has been reported [1] upstream and fixed in php 5.3.8 [2].
>
> [1] https://bugs.php.net/bug.php?id=55439
> [2] http://www.php.net/archive/2011.php#id2011-08-23-1
>
> This bug report will prevent php 5.3.7 to be accepted in testing.
> --
> William
>
>
>
> _______________________________________________
> pkg-php-maint mailing list
> pkg-php-maint@lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-php-maint
>



-- 
Ondřej Surý <ondrej@sury.org>
http://blog.rfc1925.org/




Message #11 received at 639132-done@bugs.debian.org (full text, mbox, reply):

From: William Dauchy <wdauchy@gmail.com>
To: Ondřej Surý <ondrej@debian.org>
Cc: 639132-done@bugs.debian.org
Subject: Re: [php-maint] Bug#639132: php5: crypt() returns only the salt for MD5
Date: Wed, 24 Aug 2011 15:24:34 +0200
Hi Ondřej,

On Wed, Aug 24, 2011 at 3:17 PM, Ondřej Surý <ondrej@debian.org> wrote:
> And php5 in Debian is... not affected, because we patch PHP5 to use
> system crypt(). Unfortunately I was not able to respond before you
> filled the bug.

Thank you for the information about `crypt`.

> I'm sorry that Lior Kaplan has told you to fill the bug, since he
> asked about it yesterday (or day before) and I already told him that
> the php5 in Debian is not affected. So I quite don't understand why he
> responded the way he did.
>
> I would advice to wait for the maintainer response (you can find the
> list in the Maintainer and/or Uploaders field) next time when asking
> whether to fill the bug or not.

Understand. I did not thought about double checking the list of
Maintainers and/or Uploaders after my email at php maintainers ML.
About the severity, I was sure that I selected a higher level; anyway.

Regards,

-- 
William




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Fri, 27 Jan 2012 07:35:20 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sun Jul 2 02:32:34 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.