Package: xcfa
Version: 4.3.1-1
Severity: important
Tags: security
xcfa contains several insecure uses of temporary files.
For example the file src/get_info.c has code to test that
curl is present, in the function GetInfo_wget which
essentially runs:
wget --user-agent=\Mozilla 22.0\
Processing commands for cont...@bugs.debian.org:
forwarded 756600 Claude Bulin x...@tuxfamily.org
Bug #756600 [xcfa] xcfa: Insecure use of temporary files, subject to race
conditions
Set Bug forwarded-to-address to 'Claude Bulin x...@tuxfamily.org'.
tags 756600 + upstream
Bug #756600 [xcfa]
Hello,
On Thu, Jul 31, 2014 at 10:00 AM, Steve Kemp st...@steve.org.uk wrote:
Package: xcfa
Version: 4.3.1-1
Severity: important
Tags: security
xcfa contains several insecure uses of temporary files.
Thank you Steve for the great work.
Claude, can you please have a look at this bug? It
Hi Thorsten,
thanks for the detailed feedback, please see my comments below.
On 30.07.2014 16:05, Thorsten Alteholz wrote:
ok, so I would suggest to change the header of those application files
from This file is part of libde265. to something like This file is
part of a sample application to
Processing commands for cont...@bugs.debian.org:
tags 754732 + pending
Bug #754732 [src:gpac] Outdated copyright
Added tag(s) pending.
thanks
Stopping processing here.
Please contact me if you need assistance.
--
754732: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754732
Debian Bug
We believe that the bug you reported is now fixed; the following
package(s) have been removed from unstable:
yafaray |0.1.5-3 | source
yafaray | 0.1.5-3+b2 | amd64, armel, armhf, hurd-i386, i386, kfreebsd-amd64,
kfreebsd-i386, mips, mipsel, powerpc, s390x, sparc
---
gpac_0.5.0+svn5324~dfsg1-1_amd64.changes uploaded successfully to localhost
along with the files:
gpac_0.5.0+svn5324~dfsg1-1_amd64.deb
gpac-dbg_0.5.0+svn5324~dfsg1-1_amd64.deb
gpac-modules-base_0.5.0+svn5324~dfsg1-1_amd64.deb
libgpac3_0.5.0+svn5324~dfsg1-1_amd64.deb
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Format: 1.8
Date: Thu, 31 Jul 2014 14:13:58 +0100
Source: gpac
Binary: gpac gpac-dbg gpac-modules-base libgpac3 libgpac-dbg libgpac-dev
Architecture: source amd64
Version: 0.5.0+svn5324~dfsg1-1
Distribution: unstable
Urgency: medium
Your message dated Thu, 31 Jul 2014 15:34:56 +
with message-id e1xcsnc-0007ft...@franck.debian.org
and subject line Bug#754732: fixed in gpac 0.5.0+svn5324~dfsg1-1
has caused the Debian Bug report #754732,
regarding Outdated copyright
to be marked as done.
This means that you claim that the
gmerlin_1.2.0~dfsg+1-3_amd64.changes uploaded successfully to localhost
along with the files:
gmerlin-data_1.2.0~dfsg+1-3_all.deb
gmerlin_1.2.0~dfsg+1-3_amd64.deb
gmerlin-plugins-base_1.2.0~dfsg+1-3_amd64.deb
gmerlin-dbg_1.2.0~dfsg+1-3_amd64.deb
libgmerlin0_1.2.0~dfsg+1-3_amd64.deb
Accepted:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Thu, 31 Jul 2014 17:45:51 +0200
Source: gmerlin
Binary: gmerlin gmerlin-plugins-base gmerlin-data gmerlin-dbg libgmerlin0
libgmerlin-common libgmerlin-dev
Architecture: source all amd64
Version: 1.2.0~dfsg+1-3
Your message dated Thu, 31 Jul 2014 16:19:18 +
with message-id e1xct4y-0005ke...@franck.debian.org
and subject line Bug#748164: fixed in gmerlin 1.2.0~dfsg+1-3
has caused the Debian Bug report #748164,
regarding Function declaration without parameter type list shadows risk of
stack underflow
FYI: The status of the fdk-aac source package
in Debian's testing distribution has changed.
Previous version: 0.1.2-1
Current version: 0.1.3-1
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you will
FYI: The status of the libav source package
in Debian's testing distribution has changed.
Previous version: 6:10.2-1
Current version: 6:10.2-2
--
This email is automatically generated once a day. As the installation of
new packages into testing happens multiple times a day you will
FYI: The status of the yafaray-exporter source package
in Debian's testing distribution has changed.
Previous version: 0.1.2+really0.1.2~beta5-3
Current version: (not in testing)
Hint: Package not in unstable
The script that generates this mail tries to extract removal
reasons from
Package: mplayer2
Version: 2.0-728-g2c378c7-2
Severity: normal
Tags: patch
User: debian-powe...@lists.debian.org
Usertags: ppc64el
Dear Maintainer,
Currently mplayer2 doesn't built on ppc64el because this architecture/processor
is not known by the configure script, causing the following failure:
Patch also sent upstream:
http://devel.mplayer2.org/ticket/267
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
xbmc 2:13.1~rc1+dfsg1-1 is marked for autoremoval from testing on 2014-08-31
It is affected by these RC bugs:
755121: xbmc: FTBFS: error: 'CLIENT' has not been declared
___
pkg-multimedia-maintainers mailing list
xbmc-pvr-addons 13.0+git20140512+g91cc731+dfsg1-1 is marked for autoremoval
from testing on 2014-08-31
It (build-)depends on packages with these RC bugs:
755121: xbmc: FTBFS: error: 'CLIENT' has not been declared
___
pkg-multimedia-maintainers
my name is ming yang,i work with Hang Seng Bank Ltd Hong Kong.i want you to be
the next of kin of my late client late Gen. Aadel Akgaal, respond
___
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
20 matches
Mail list logo
