[Bug 175791] Please sync sing 1.1-15 (universe) from Debian unstable (main)

William Grant william at qeuni.net
Wed Dec 12 05:33:24 GMT 2007


Public bug reported:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/sing
 status confirmed
 subscribe ubuntu-archive

Please sync sing 1.1-15  (universe) from Debian unstable (main).

Explanation of the Ubuntu delta and why it can be dropped:
The security fix is now in Debian.

Changelog since current hardy version 1.1-15ubuntu1:

sing (1.1-16) unstable; urgency=high

  * Patched parser.c to drop privileges when opening log file and
    running sing SUID. (CVE-2007-6211)
    Thanks a lot to Nico Golde for the patch. (Closes: #454167)

 -- Alberto Gonzalez Iniesta <agi at inittab.org>  Tue, 04 Dec 2007
23:16:15 +0100


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHX3KdAc+S8KckfcURAtTUAJ9ZrGC8mkp7I6tco8rPDnSMWsgTUQCeLVrM
PSmBi/EWuhKXyythcz2wF8o=
=A/vF
-----END PGP SIGNATURE-----

** Affects: sing (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
Please sync sing 1.1-15  (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/175791
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list