Seems that the Dapper update got caught in a queue somewhere:
--
vlc (0.8.4.debian-1ubuntu6.1) dapper-security; urgency=low
* Fix format string vulnerability with patch taken from Debian BTS
MOAB-02-01-2007-CVE-2007-0017.dpatch, CVE-2007-0017. Closes Malone: #78610
-- Martin Juergens <[EMAIL PROTECTED]> Sat, 27 Jan 2007 18:39:58
+0100
** Changed in: vlc (Ubuntu Dapper)
Status: Confirmed => Fix Released
--
URL format string injection in CDDA and VCDX plugins
https://bugs.launchpad.net/bugs/78610
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs