[Pkg-kde-extras] Amarok: SECURITY ISSUE in Debian Etch and Lenny

Neil McGovern maulkin at halon.org.uk
Tue Aug 19 13:27:38 UTC 2008


On Mon, Aug 18, 2008 at 07:31:29PM +0300, Modestas Vainius wrote:
> Hi,
> 
> pirmadienis 18 rugpjūtis 2008, thacrazze rašė:
> > in the Amarok package is a security issue
> >
> > It is fixed in Amarok 1.4.10
> >(http://secunia.com/advisories/31418/,
> > http://amarok.kde.org/en/releases/1/4/10)
> The fixed version has been in unstable for two days already. 1.4.10 is a new 
> upstream release but:
> 
> 1. The only real change since 1.4.9.1 is the security fix mentioned above and 
> updates to translations.
> 2. The big upstream tarball diff comes from the differences in *autogenerated* 
> autotools stuff. However, autotools stuff is regenerated each time package is 
> built anyway so these differences can be safely ignored.
> 3. Packaging diff from 1.4.9.1-3 to 1.4.10-1 is just a new debian/changelog 
> entry.
> 

What about:
src/scripts/rbot/*
doc/ru/*

Why have these been deleted?

Neil
-- 
A. Because it breaks the logical sequence of discussion
Q. Why is top posting bad?
gpg key - http://www.halon.org.uk/pubkey.txt ; the.earth.li B345BDD3
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-kde-extras/attachments/20080819/1663923b/attachment.pgp 


More information about the pkg-kde-extras mailing list