[Bug 312215] [NEW] Please merge cmus 2.2.0-1.1 (multiverse) from Debian unstable (main).

Alessio Treglia quadrispro at ubuntu.com
Mon Dec 29 16:42:56 UTC 2008


Public bug reported:

Binary package hint: cmus

Please merge cmus 2.2.0-1.1 (multiverse) from Debian unstable (main).

Changelog since current jaunty version 2.2.0-1ubuntu1:

cmus (2.2.0-1.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Modify example script cmus-status-display to write the current
    status to .cmus-status in the user's home instead of /tmp/cmus-status,
    since the latter could lead to symlink attacks. CVE-2008-5375
    (Closes: #509277)

 -- Moritz Muehlenhoff <jmm at debian.org>  Sun, 28 Dec 2008 14:57:06 +0100

** Affects: cmus (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
Please merge cmus 2.2.0-1.1 (multiverse) from Debian unstable (main).
https://bugs.launchpad.net/bugs/312215
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs




More information about the universe-bugs mailing list