[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Accepted cmus 2.2.0-1.1 (source i386)



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 28 Dec 2008 14:57:06 +0100
Source: cmus
Binary: cmus
Architecture: source i386
Version: 2.2.0-1.1
Distribution: unstable
Urgency: high
Maintainer: Julien Louis <ptitlouis@sysif.net>
Changed-By: Moritz Muehlenhoff <jmm@debian.org>
Description: 
 cmus       - Lightweight ncurses audio player
Closes: 509277
Changes: 
 cmus (2.2.0-1.1) unstable; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Modify example script cmus-status-display to write the current
     status to .cmus-status in the user's home instead of /tmp/cmus-status,
     since the latter could lead to symlink attacks. CVE-2008-5375
     (Closes: #509277)
Checksums-Sha1: 
 b31a53b71ba573135dcc27bd81d395401b553922 1164 cmus_2.2.0-1.1.dsc
 02d5af37a0a20dc1b8422d22f32ff8e1957ed240 3425 cmus_2.2.0-1.1.diff.gz
 a68a552d4ba2769e73378d0a15f1cf311e39aac9 142782 cmus_2.2.0-1.1_i386.deb
Checksums-Sha256: 
 e5e13f60cc18e00aa67d1cf64da08a114c7ec7851a1bb73297f4d42f5a2b4fd0 1164 cmus_2.2.0-1.1.dsc
 4c7554b0eeb685300c9eadcb76c28f2e788e8eec5bf4cc0612911ed4e4082555 3425 cmus_2.2.0-1.1.diff.gz
 91d115bde633e38b318d9dc14cb6840b08c8adeab18e0efbbcbd641103d9e893 142782 cmus_2.2.0-1.1_i386.deb
Files: 
 31c9f8f549364dc0142acfad53ca10dc 1164 sound optional cmus_2.2.0-1.1.dsc
 352cf4c3510531cc9f0d7a6393c03b91 3425 sound optional cmus_2.2.0-1.1.diff.gz
 e81283c1d046655fa7cdeafc51bb8a73 142782 sound optional cmus_2.2.0-1.1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAklXh0oACgkQXm3vHE4uylqciwCePuvWedr6hyhKcDEazlFKnidN
k8MAoN+XWSzXqaftuzrMtRVADsYAsepS
=D9s8
-----END PGP SIGNATURE-----


Accepted:
cmus_2.2.0-1.1.diff.gz
  to pool/main/c/cmus/cmus_2.2.0-1.1.diff.gz
cmus_2.2.0-1.1.dsc
  to pool/main/c/cmus/cmus_2.2.0-1.1.dsc
cmus_2.2.0-1.1_i386.deb
  to pool/main/c/cmus/cmus_2.2.0-1.1_i386.deb


Reply to: