[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#559814: hamlib: stable-security fix CVE-2009-3736



Hi,
* Kamal Mostafa <kamal@whence.com> [2010-12-02 03:07]:
> Dear security team-
> 
> I'm the DM maintainer for the package 'hamlib' (I am also currently working
> through the of becoming a DD).  Regarding this bug (a mass-filed CVE against
> libtool):
> 
>     http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559814
>     CVE-2009-3736 local privilege escalation
> 
> I fixed this problem for hamlib in unstable (and upstream) some time ago.
> I have now constructed a fix package for hamlib in stable, for which I ask
> permission to upload to stable-security.  The fix package has been
> reviewed by Gunnar Wolf, who has kindly agreed to upload it pending
> approval.
[...] 
This issue doesn't warrant a DSA. Could you please upload this to 
stable-proposed-updates[0]?

Cheers
Nico
[0] http://www.debian.org/doc/developers-reference/pkgs.html#upload-stable
-- 
Nico Golde - http://www.ngolde.de - nion@jabber.ccc.de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.

Attachment: pgpPf_FDk5f5P.pgp
Description: PGP signature


Reply to: