Comment 4 for bug 312215

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package cmus - 2.2.0-1.1ubuntu1

---------------
cmus (2.2.0-1.1ubuntu1) jaunty; urgency=low

  * Merge from debian unstable (LP: #312215), Ubuntu remaining changes:
    - ffmpeg.c: use correct headers location to fix FTBFS with recent ffmpeg
      snapshots (LP: #311007).

cmus (2.2.0-1.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Modify example script cmus-status-display to write the current
    status to .cmus-status in the user's home instead of /tmp/cmus-status,
    since the latter could lead to symlink attacks. CVE-2008-5375
    (Closes: #509277)

 -- Alessio Treglia <email address hidden> Mon, 29 Dec 2008 17:36:47 +0100