[ubuntu/oneiric-security] rhythmbox_2.90.1~20110908-0ubuntu1.4_armel_translations.tar.gz, rhythmbox_2.90.1~20110908-0ubuntu1.4_powerpc_translations.tar.gz, rhythmbox_2.90.1~20110908-0ubuntu1.4_i386_translations.tar.gz, rhythmbox_2.90.1~20110908-0ubuntu1.4_amd64_translations.tar.gz, rhythmbox, rhythmbox_2.90.1~20110908-0ubuntu1.4_static_translations.tar.gz 2.90.1~20110908-0ubuntu1.4 (Accepted)

[Jamie Strandboge]

rhythmbox (2.90.1~20110908-0ubuntu1.4) oneiric-security; urgency=low

  * SECURITY UPDATE: fix insecure directory for python module import in
    context plugin
    - debian/patches/08_CVE-2012-3355.patch: update context plugin to use
      tempfile.mkdtemp() instead of /tmp/context. Patch thanks to
      Andreas Henriksson.
    - CVE-2012-3355

Date: Mon, 09 Jul 2012 11:00:07 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Desktop Team <ubuntu-desktop at lists.ubuntu.com>
https://launchpad.net/ubuntu/oneiric/+source/rhythmbox/2.90.1~20110908-0ubuntu1.4
-------------- next part --------------
Format: 1.8
Date: Mon, 09 Jul 2012 11:00:07 -0500
Source: rhythmbox
Binary: rhythmbox rhythmbox-dbg rhythmbox-plugins rhythmbox-plugin-cdrecorder librhythmbox-core4 rhythmbox-dev gir1.2-rb-3.0
Architecture: source
Version: 2.90.1~20110908-0ubuntu1.4
Distribution: oneiric-security
Urgency: low
Maintainer: Ubuntu Desktop Team <ubuntu-desktop at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 gir1.2-rb-3.0 - GObject introspection data for the rhythmbox music player
 librhythmbox-core4 - support library for the rhythmbox music player
 rhythmbox  - music player and organizer for GNOME
 rhythmbox-dbg - debugging symbols for rhythmbox
 rhythmbox-dev - development files for the rhythmbox music player
 rhythmbox-plugin-cdrecorder - burning plugin for rhythmbox music player
 rhythmbox-plugins - plugins for rhythmbox music player
Changes: 
 rhythmbox (2.90.1~20110908-0ubuntu1.4) oneiric-security; urgency=low
 .
   * SECURITY UPDATE: fix insecure directory for python module import in
     context plugin
     - debian/patches/08_CVE-2012-3355.patch: update context plugin to use
       tempfile.mkdtemp() instead of /tmp/context. Patch thanks to
       Andreas Henriksson.
     - CVE-2012-3355
Checksums-Sha1: 
 5f92617d481194ba7205c644163c9c174672e3c9 3418 rhythmbox_2.90.1~20110908-0ubuntu1.4.dsc
 76c5e313473f82a657706c39077c2a79bc8a6368 37990 rhythmbox_2.90.1~20110908-0ubuntu1.4.debian.tar.gz
Checksums-Sha256: 
 9660538aa82e9a943cdb3f4482d4758c7b0642120f050b30cf8f2324f651cad3 3418 rhythmbox_2.90.1~20110908-0ubuntu1.4.dsc
 09ad9ad77362762426b5bf52f094746f6b05b0ae0b03b7952dca5214e5186f7b 37990 rhythmbox_2.90.1~20110908-0ubuntu1.4.debian.tar.gz
Files: 
 54e6683e84bf9ec71d84c78af4230090 3418 gnome optional rhythmbox_2.90.1~20110908-0ubuntu1.4.dsc
 5f8fa3b2a88741e2a003cb730d0a7c32 37990 gnome optional rhythmbox_2.90.1~20110908-0ubuntu1.4.debian.tar.gz
Original-Maintainer: Loic Minier <lool at dooz.org>