On 13 Sep 2013, at 23:01, Rebecca N. Palmer <r.pal...@bham.ac.uk> wrote:
> None of Debian/Ubuntu's 5 security patches (fixing CVE-2012-2090,
> CVE-2012-2091 and issue 1117, see
> http://code.google.com/p/flightgear-bugs/issues/detail?id=1117) are currently
> in 2.12; I suspect, but have not checked, that they aren't in master either.
>
> for flightgear:
> (CVE-2012-2090.diff is attached, as it required minor changes to compile in
> 2.12)
> http://patch-tracker.debian.org/patch/series/dl/flightgear/2.10.0-2/CVE-2012-2091.diff
> http://patch-tracker.debian.org/patch/series/dl/flightgear/2.10.0-2/bug1117.diff
> for simgear:
> http://patch-tracker.debian.org/patch/series/dl/simgear/2.10.0-3/CVE-2012-2090.diff
> http://patch-tracker.debian.org/patch/series/dl/simgear/2.10.0-3/CVE-2012-2091.diff
Thanks, I'll apply these as-is to the 2.12 branch. For master/next, I think a
slight re-factoring can make things cleaner. (E.g a
simgear::strutils::sanitize_printf_format)
>
>> far more useful would be to get ARM working
> This patch should do that, while changing nothing on x86:
> http://anonscm.debian.org/gitweb/?p=collab-maint/simgear.git;a=blob_plain;f=debian/patches/cppbind-charsignedness.diff;hb=fcca8ff0b3995680e739f0c9499f8c08996513a6
>
> I have successfully compiled 2.12 with all 6 above patches on an Ubuntu 13.04
> amd64 system, but was unable to get the 2.12 data to check whether it
> actually works. (fgdata doesn't have a "Download" button on its Gitorious
> page (flightgear and simgear do), "Clone" requires a Gitorious account which
> I don't have and would probably be very large, and the main site only has up
> to 2.10.)
I've got Ubuntu 13.04 and an fgdata checkout here, so I can test that later
today.
What is the recommended notification channel from Debian to here? Does it
require someone here to register as the Debian maintainer for the flightgear
packages, or something else?
Kind regards,
James
------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/22/13.
http://pubads.g.doubleclick.net/gampad/clk?id=64545871&iu=/4140/ostg.clktrk
_______________________________________________
Flightgear-devel mailing list
Flightgear-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/flightgear-devel
