Update to 1.7.2

[Alexander Buchner]

Besides regular bug fixing version 1.7.2 fixes CVE-2014-5369.

[Seth Arnold (seth-arnold)]

Ubuntu, like most other Linux distros, releases security updates by patching specific issues rather than updating whole versions of software. This is to keep the packages in a stable release as close to their original version as possible to avoid introducing unintended regressions. For more details, see https://wiki.ubuntu.com/StableReleaseUpdates.

Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

Thanks for taking the time to report this bug and helping to make Ubuntu better.

[Amr Ibrahim (amribrahim1987)]

Could someone from the MOTU SWAT team do something about this?

[Alexander Buchner (alexander-buchner)]

So, nobody cares?

[Rolf Leggewie (r0lf)]

Seth, this is only part of the truth and in fact, in this case, I think it is actually misinformation. What you are writing about is an SRU. But vivid should definitely get fixed, which is what I requested in bug 1392577