[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#578542: pu: package mpg123/1.4.3-4lenny1



Hi,

On Tue, 2010-04-20 at 19:13 +0200, Daniel Kobras wrote:
> DSA 1958 introduced a libtool update that would no longer add the current
> working directory to the library search path (CVE-2009-3736). This broke the
> mpg123 version in lenny which chdir()s to its plugin directory and relies on
> the previous libtool behaviour to find its output modules. Therefore, I'd like
> to ask for permission to upload a new version of mpg123 to proposed-updates
> that fixes the regression. Debdiff is attached.

Please go ahead.

Regards,

Adam



Reply to: