Bug#693301: MediaTomb always bind to all interfaces regardless of configuration settings

2012-11-15 Thread Vladimir Volovich
Package: mediatomb-common Version: 0.12.1-4+b1 Severity: critical File: /usr/bin/mediatomb Tags: security Attempt to force mediatomb to bind to a specific IP address (or interface) is ignored. E.g. I've tried to change setting in /etc/default/mediatomb as follows: OPTIONS=-i 10.0.10.2 and

Bug#693301: [Secure-testing-team] Bug#693301: MediaTomb always bind to all interfaces regardless of configuration settings

2012-11-15 Thread Yves-Alexis Perez
Control: severity -1 important On jeu., 2012-11-15 at 12:57 +0400, Vladimir Volovich wrote: Package: mediatomb-common Version: 0.12.1-4+b1 Severity: critical No need to over-estimate severity. File: /usr/bin/mediatomb Tags: security Attempt to force mediatomb to bind to a specific IP

Bug#693301: [Secure-testing-team] Bug#693301: MediaTomb always bind to all interfaces regardless of configuration settings

2012-11-15 Thread Vladimir Volovich
(sorry for the duplicate email - forgot to send a CC to bugs.debian.org) On Thu, Nov 15, 2012 at 4:15 PM, Yves-Alexis Perez cor...@debian.org wrote: Control: severity -1 important On jeu., 2012-11-15 at 12:57 +0400, Vladimir Volovich wrote: Package: mediatomb-common Version: 0.12.1-4+b1

Bug#693301: [Secure-testing-team] Bug#693301: MediaTomb always bind to all interfaces regardless of configuration settings

2012-11-15 Thread Yves-Alexis Perez
On jeu., 2012-11-15 at 16:48 +0400, Vladimir Volovich wrote: (sorry for the duplicate email - forgot to send a CC to bugs.debian.org) On Thu, Nov 15, 2012 at 4:15 PM, Yves-Alexis Perez cor...@debian.org wrote: Control: severity -1 important On jeu., 2012-11-15 at 12:57 +0400, Vladimir

Bug#693301: [Secure-testing-team] Bug#693301: MediaTomb always bind to all interfaces regardless of configuration settings

2012-11-15 Thread Vladimir Volovich
On Thu, Nov 15, 2012 at 5:33 PM, Yves-Alexis Perez cor...@debian.org wrote: On jeu., 2012-11-15 at 16:48 +0400, Vladimir Volovich wrote: (sorry for the duplicate email - forgot to send a CC to bugs.debian.org) On Thu, Nov 15, 2012 at 4:15 PM, Yves-Alexis Perez cor...@debian.org wrote: