FFe [SECURITY]: Please Merge gnash 0.8.10-3 (universe) from Debian unstable (main)

Bug #940876 reported by Oibaf
24
This bug affects 3 people
Affects Status Importance Assigned to Milestone
gnash (Ubuntu)
Fix Released
Wishlist
Micah Gersten

Bug Description

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects ubuntu/gnash
 status new
 importance wishlist
 subscribe ubuntu-sponsors
 done

Please merge gnash 0.8.10-3 (universe) from Debian unstable (main).
It's a stable release (while precise currently has a git snapshot) with many bugs fixed and also a security fix.

Changelog entries since current precise version 0.8.10~git20111001-1ubuntu1:

gnash (0.8.10-3) unstable; urgency=low

  * Fix CXX optimization (Closes: #659495).

 -- Gabriele Giacone <email address hidden> Sat, 11 Feb 2012 16:48:45 +0100

gnash (0.8.10-2) unstable; urgency=low

  * Fix cygnal upgrade (Closes: #659095).
  * Suggest browser-plugin-lightspark, mention in d/README.Debian (Closes:
    #652092).
  * Update d/README.Debian.

 -- Gabriele Giacone <email address hidden> Thu, 09 Feb 2012 02:26:34 +0100

gnash (0.8.10-1) unstable; urgency=low

  * New upstream release.
    + Fix CVE-2011-4328 (Closes: #649384).
    + Fix parsing of lossless 15bit bitmaps (Closes: #634867).
  * Add Gnome 3 thumbnailer.
  * Add libboost-iostreams-dev and libgconf2-dev build deps.
  * Transition to dh_python2.
  * Fix d/copyright according to DEP-5.
  * Remove dash escaping in manpages (Closes: #640107).
  * Add noapidoc and nocheck build options.
  * Move cygnal-only libs to cygnal package.
  * Add revno.h generation to get-source target.
  * Replace upstream changelog with upstream NEWS.

 -- Gabriele Giacone <email address hidden> Wed, 08 Feb 2012 03:48:11 +0100

gnash (0.8.10~git20111001-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix "FTBFS (npapi/plugin.cpp)": add patch fix-const.patch from peter green
    (adds const quailifiers to function signatures).
    Also clean up properly in debian/rules.
    (Closes: #651625)

 -- gregor herrmann <email address hidden> Wed, 11 Jan 2012 18:19:34 +0100

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk9IxVsACgkQ+zwqqQYiYIpzYwCgvIQ5WnuDHzU0kI7T3Zg6QZ6b
4KUAoKLtkPoXr+EczBV/3+4JdOFB7UzK
=zZ4c
-----END PGP SIGNATURE-----

Tags: merge

Related branches

CVE References

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gnash (Ubuntu):
status: New → Confirmed
Revision history for this message
Daniel Holbach (dholbach) wrote :

Unfortunately there is nothing which could be sponsored right now, so I will unsubscribe the 'ubuntu-sponsors' team for now.

tags: added: merge
Revision history for this message
Scott Kitterman (kitterman) wrote :

Ack. FFe approved. Setting back to New for sponsor review.

Changed in gnash (Ubuntu):
status: Confirmed → New
Revision history for this message
Martin Pitt (pitti) wrote :

There is nothing to sponsor -- someone actually needs to prepare the merge.

Revision history for this message
Scott Kitterman (kitterman) wrote : Re: [Bug 940876] Re: FFe [SECURITY]: Please Merge gnash 0.8.10-3 (universe) from Debian unstable (main)

On Saturday, March 03, 2012 09:09:48 PM you wrote:
> There is nothing to sponsor -- someone actually needs to prepare the
> merge.

Right. Good point.

Revision history for this message
Micah Gersten (micahg) wrote :

I'll take this.

Changed in gnash (Ubuntu):
assignee: nobody → Micah Gersten (micahg)
status: New → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package gnash - 0.8.10-3ubuntu1

---------------
gnash (0.8.10-3ubuntu1) precise; urgency=low

  * Merge from Debian testing (FFe: LP: #940876), remaining changes:
    - Use mozilla-flashplugin as the alternative for now
    - Change xulrunner-dev build dep to firefox-dev
  * Drop the plugin API porting patch, this has been fixed upstream
    - drop debian/patches*
  * Drop the following change as we want Adobe's player to take priority
    if it's installed
    - Set alternative priority to 50 so that it matches Adobe Flash's priority

gnash (0.8.10-3) unstable; urgency=low

  * Fix CXX optimization (Closes: #659495).

gnash (0.8.10-2) unstable; urgency=low

  * Fix cygnal upgrade (Closes: #659095).
  * Suggest browser-plugin-lightspark, mention in d/README.Debian (Closes:
    #652092).
  * Update d/README.Debian.

gnash (0.8.10-1) unstable; urgency=low

  * New upstream release.
    + Fix CVE-2011-4328 (Closes: #649384).
    + Fix parsing of lossless 15bit bitmaps (Closes: #634867).
  * Add Gnome 3 thumbnailer.
  * Add libboost-iostreams-dev and libgconf2-dev build deps.
  * Transition to dh_python2.
  * Fix d/copyright according to DEP-5.
  * Remove dash escaping in manpages (Closes: #640107).
  * Add noapidoc and nocheck build options.
  * Move cygnal-only libs to cygnal package.
  * Add revno.h generation to get-source target.
  * Replace upstream changelog with upstream NEWS.

gnash (0.8.10~git20111001-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix "FTBFS (npapi/plugin.cpp)": add patch fix-const.patch from peter green
    (adds const quailifiers to function signatures).
    Also clean up properly in debian/rules.
    (Closes: #651625)
 -- Micah Gersten <email address hidden> Sun, 04 Mar 2012 03:19:06 -0600

Changed in gnash (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.