[ubuntu-mono] [Bug 658997] Re: please update from 0.3.4-1 to 0.3.4-1.1 from Debian (unstable)
Jamie Strandboge
jamie at ubuntu.com
Thu Dec 16 20:54:51 UTC 2010
In addition to the grammar error, the version is incorrect and the
changelog does not follow
https://wiki.ubuntu.com/SecurityTeam/UpdatePreparation#Packaging. In the
interest of time, I will fix this up and upload.
--
You received this bug notification because you are a member of Ubuntu
CLI/Mono Uploaders, which is subscribed to bareftp in ubuntu.
https://bugs.launchpad.net/bugs/658997
Title:
please update from 0.3.4-1 to 0.3.4-1.1 from Debian (unstable)
Status in “bareftp” package in Ubuntu:
Confirmed
Bug description:
Binary package hint: bareftp
There is a local exploit identified as release critical from Debian based on overriding LD_LIBRARY_PATH (http://bugs.debian.org/598284). We do not carry any patch for this package, and the only change from -1 to -1.1 is explicitly for this vulnerability. 0.3.4-1.1 does build on Maverick.
http://security-tracker.debian.org/tracker/CVE-2010-3350
More information about the Ubuntu-mono
mailing list