please remove acon (source, binary) from intrepid.

Bug #280177 reported by StefanPotyra
256
Affects Status Importance Assigned to Milestone
acon (Debian)
Fix Released
Undecided
Unassigned
acon (Ubuntu)
Fix Released
High
Unassigned

Bug Description

Revision history for this message
StefanPotyra (sistpoty) wrote :

hm... should we remove this package from intrepid? (it's suggested in the Debian bug report to remove it from Debian altogeether).

Changed in acon:
importance: Undecided → High
status: New → Confirmed
Changed in acon:
status: Unknown → New
Revision history for this message
StefanPotyra (sistpoty) wrote :

packages was removed from unstable, see bug #501482.

If noone objects, I'll turn this into a removal request tomorrow.

Revision history for this message
StefanPotyra (sistpoty) wrote :

Hi,

please remove acon from intrepid for the following reasons:
* was removed from unstable
* contains a setuid binary
* is written in bad/insecure manner, as the debian security audit (cf. debian #501461) revealed.

Thanks,
    Stefan.

Revision history for this message
Martin Pitt (pitti) wrote :

2008-10-13 07:41:34 INFO Removing candidates:
2008-10-13 07:41:34 INFO acon 1.0.5-7 in intrepid
2008-10-13 07:41:34 INFO Removed-by: Martin Pitt
2008-10-13 07:41:34 INFO Comment: insecure, unmaintained, suid root binary, LP #280177
2008-10-13 07:41:34 INFO 1 package successfully removed.

Changed in acon:
status: Confirmed → Fix Released
Revision history for this message
Nizar Kerkeni (nizarus) wrote :

acon should be removed from language-support-extra-ar dependency (https://bugs.edge.launchpad.net/ubuntu/+source/acon/+bug/283268)

Revision history for this message
Artur Rona (ari-tczew) wrote :

Fixed in version 1.0.5-7+rm

Changed in acon (Debian):
importance: Unknown → Undecided
status: New → Fix Released
Revision history for this message
Artur Rona (ari-tczew) wrote :

There is nothing to take care, so I'm unsubscribing motu-swat.

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.