Bug#699424: libgconf-2-4: Use after free in gconf-dbus

[Paul Menzel]

Package: libgconf-2-4
Version: 3.2.5-1
Severity: important
Tags: upstream fixed-upstream patch
Control: forwarded -1 https://bugzilla.gnome.org/show_bug.cgi?id=667167
Control: affects evolution

Dear Debian folks,


the upstream GConf master branch contains a fix for a use after free in
gconf-dbus [1]. This could crash Evolution/Evolution Data Server.

I am going to apply that upstream patch to the Debian package.


Thanks,

Paul


[1] http://git.gnome.org/browse/gconf/commit/?id=84884e9df7ce8c081a1c223c66a799b82545ff1e

-- System Information:
Debian Release: 7.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libgconf-2-4 depends on:
ii  gconf2-common      3.2.5-1
ii  libc6              2.13-38
ii  libdbus-1-3        1.6.8-1
ii  libdbus-glib-1-2   0.100-1
ii  libglib2.0-0       2.33.12+really2.32.4-5
ii  multiarch-support  2.13-38

Versions of packages libgconf-2-4 recommends:
ii  gconf-service  3.2.5-1.1

libgconf-2-4 suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 06-gconf-dbus-fix-use-after-free.patch
Type: text/x-patch
Size: 3284 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20130131/7d0f95f7/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20130131/7d0f95f7/attachment.pgp>