[Bug 312215] [NEW] Please merge cmus 2.2.0-1.1 (multiverse) from Debian unstable (main).
Alessio Treglia
quadrispro at ubuntu.com
Mon Dec 29 16:42:56 UTC 2008
Public bug reported:
Binary package hint: cmus
Please merge cmus 2.2.0-1.1 (multiverse) from Debian unstable (main).
Changelog since current jaunty version 2.2.0-1ubuntu1:
cmus (2.2.0-1.1) unstable; urgency=high
* Non-maintainer upload by the Security Team.
* Modify example script cmus-status-display to write the current
status to .cmus-status in the user's home instead of /tmp/cmus-status,
since the latter could lead to symlink attacks. CVE-2008-5375
(Closes: #509277)
-- Moritz Muehlenhoff <jmm at debian.org> Sun, 28 Dec 2008 14:57:06 +0100
** Affects: cmus (Ubuntu)
Importance: Undecided
Status: Confirmed
--
Please merge cmus 2.2.0-1.1 (multiverse) from Debian unstable (main).
https://bugs.launchpad.net/bugs/312215
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
More information about the universe-bugs
mailing list