rhythmbox (2.96-0ubuntu4.1) precise-security; urgency=low

  * SECURITY UPDATE: fix insecure directory for python module import in
    context plugin
    - debian/patches/CVE-2012-3355.patch: update context plugin to use
      tempfile.mkdtemp() instead of /tmp/context. Patch thanks to
      Andreas Henriksson.
    - CVE-2012-3355

Date: Mon, 09 Jul 2012 10:55:18 -0500
Changed-By: Jamie Strandboge <[email protected]>
Maintainer: Ubuntu Developers <[email protected]>
https://launchpad.net/ubuntu/precise/+source/rhythmbox/2.96-0ubuntu4.1
Format: 1.8
Date: Mon, 09 Jul 2012 10:55:18 -0500
Source: rhythmbox
Binary: rhythmbox rhythmbox-data rhythmbox-dbg rhythmbox-plugins 
rhythmbox-plugin-cdrecorder rhythmbox-plugin-magnatune 
rhythmbox-plugin-zeitgeist rhythmbox-mozilla librhythmbox-core5 rhythmbox-dev 
rhythmbox-doc gir1.2-rb-3.0
Architecture: source
Version: 2.96-0ubuntu4.1
Distribution: precise-security
Urgency: low
Maintainer: Ubuntu Developers <[email protected]>
Changed-By: Jamie Strandboge <[email protected]>
Description: 
 gir1.2-rb-3.0 - GObject introspection data for the rhythmbox music player
 librhythmbox-core5 - support library for the rhythmbox music player
 rhythmbox  - music player and organizer for GNOME
 rhythmbox-data - data files for rhythmbox
 rhythmbox-dbg - debugging symbols for rhythmbox
 rhythmbox-dev - development files for the rhythmbox music player
 rhythmbox-doc - documentation files for the rhythmbox music player
 rhythmbox-mozilla - Rhythmbox Mozilla plugin
 rhythmbox-plugin-cdrecorder - burning plugin for rhythmbox music player
 rhythmbox-plugin-magnatune - Magnatune plugin for rhythmbox music player
 rhythmbox-plugin-zeitgeist - zeitgeist plugin for rhythmbox music player
 rhythmbox-plugins - plugins for rhythmbox music player
Changes: 
 rhythmbox (2.96-0ubuntu4.1) precise-security; urgency=low
 .
   * SECURITY UPDATE: fix insecure directory for python module import in
     context plugin
     - debian/patches/CVE-2012-3355.patch: update context plugin to use
       tempfile.mkdtemp() instead of /tmp/context. Patch thanks to
       Andreas Henriksson.
     - CVE-2012-3355
Checksums-Sha1: 
 17d0d9965c9b3c7ec00b18e61c59293cb3cddb19 4128 rhythmbox_2.96-0ubuntu4.1.dsc
 7b6866a95b9e6b6c4ab0f283d46beed97e771679 46199 
rhythmbox_2.96-0ubuntu4.1.debian.tar.gz
Checksums-Sha256: 
 ae72d37d43fc0cbfe92afd42872c4af225caa47fd2181c4bd97f3ccdc0262423 4128 
rhythmbox_2.96-0ubuntu4.1.dsc
 2604efaac40eb1af03d793457e1060e97674b166fef825e99380419087aa2d2a 46199 
rhythmbox_2.96-0ubuntu4.1.debian.tar.gz
Files: 
 e7e0a367ea66f9fa21488e23f849551b 4128 gnome optional 
rhythmbox_2.96-0ubuntu4.1.dsc
 691f76dc4d289b5575d843a547fdb24a 46199 gnome optional 
rhythmbox_2.96-0ubuntu4.1.debian.tar.gz
Original-Maintainer: Debian GNOME Maintainers 
<[email protected]>
-- 
Precise-changes mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/precise-changes

Reply via email to