[LAD] interesting security update to bristol just came out

2010-11-15 Thread Niels Mayer
I noticed that bristol-0.40.7-7 updated due to the following security update. What got me curious is what kind of security issue could running bristol possibly pose?? -- none on it's own, but another rogue package could exploit this issue ... https://bugzilla.redhat.com/show_bug.cgi?id=638376

Re: [LAD] [LAA] [ANN] gjacktransport 0.5.0

2010-11-15 Thread Robin Gareus
On 11/15/10 19:03, Niels Mayer wrote: On Fri, Nov 12, 2010 at 9:50 AM, Robin Gareus ro...@gareus.org wrote: http://gjacktransport.sourceforge.net/ is a tool that provides graphical control over JACK-transport [1]. IAt some point, either from installing version 0.4 or 0.5, whenever I browsed

Re: [LAD] interesting security update to bristol just came out

2010-11-15 Thread Nick Copeland
This issue has been patched in the debian source, it was done a few weeks ago now with a case on sf.net to cover it. The problem relates to a user being able to reconfigure their own LD_LIBRARY_PATH, get their own version of any of the library to load pretty easily and then do whatever they want

Re: [LAD] interesting security update to bristol just came out

2010-11-15 Thread Paul Davis
On Mon, Nov 15, 2010 at 5:39 PM, Niels Mayer nielsma...@gmail.com wrote: I noticed that bristol-0.40.7-7 updated due to the following security update. What got me curious is what kind of security issue could running bristol possibly pose?? -- none on it's own, but another rogue package could