[Bug 175791] Please sync sing 1.1-15 (universe) from Debian unstable (main)
William Grant
william at qeuni.net
Wed Dec 12 05:33:24 GMT 2007
Public bug reported:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
affects ubuntu/sing
status confirmed
subscribe ubuntu-archive
Please sync sing 1.1-15 (universe) from Debian unstable (main).
Explanation of the Ubuntu delta and why it can be dropped:
The security fix is now in Debian.
Changelog since current hardy version 1.1-15ubuntu1:
sing (1.1-16) unstable; urgency=high
* Patched parser.c to drop privileges when opening log file and
running sing SUID. (CVE-2007-6211)
Thanks a lot to Nico Golde for the patch. (Closes: #454167)
-- Alberto Gonzalez Iniesta <agi at inittab.org> Tue, 04 Dec 2007
23:16:15 +0100
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHX3KdAc+S8KckfcURAtTUAJ9ZrGC8mkp7I6tco8rPDnSMWsgTUQCeLVrM
PSmBi/EWuhKXyythcz2wF8o=
=A/vF
-----END PGP SIGNATURE-----
** Affects: sing (Ubuntu)
Importance: Undecided
Status: Confirmed
--
Please sync sing 1.1-15 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/175791
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.
More information about the ubuntu-archive
mailing list