Bug#578542: pu: package mpg123/1.4.3-4lenny1
Hi,
On Tue, 2010-04-20 at 19:13 +0200, Daniel Kobras wrote:
> DSA 1958 introduced a libtool update that would no longer add the current
> working directory to the library search path (CVE-2009-3736). This broke the
> mpg123 version in lenny which chdir()s to its plugin directory and relies on
> the previous libtool behaviour to find its output modules. Therefore, I'd like
> to ask for permission to upload a new version of mpg123 to proposed-updates
> that fixes the regression. Debdiff is attached.
Please go ahead.
Regards,
Adam
Reply to: