[ubuntu/quantal] rhythmbox 2.97-1ubuntu2 (Accepted)

[Jamie Strandboge]

rhythmbox (2.97-1ubuntu2) quantal; urgency=low

  * SECURITY UPDATE: fix insecure directory for python module import in
    context plugin
    - debian/patches/08_CVE-2012-3355.patch: update context plugin to use
      tempfile.mkdtemp() instead of /tmp/context. Patch thanks to
      Andreas Henriksson.
    - CVE-2012-3355

Date: Mon, 09 Jul 2012 11:02:32 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/rhythmbox/2.97-1ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 09 Jul 2012 11:02:32 -0500
Source: rhythmbox
Binary: rhythmbox rhythmbox-data rhythmbox-dbg rhythmbox-plugins rhythmbox-plugin-cdrecorder rhythmbox-plugin-magnatune rhythmbox-plugin-visualizer rhythmbox-plugin-zeitgeist rhythmbox-mozilla librhythmbox-core6 rhythmbox-dev rhythmbox-doc gir1.2-rb-3.0
Architecture: source
Version: 2.97-1ubuntu2
Distribution: quantal
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 gir1.2-rb-3.0 - GObject introspection data for the rhythmbox music player
 librhythmbox-core6 - support library for the rhythmbox music player
 rhythmbox  - music player and organizer for GNOME
 rhythmbox-data - data files for rhythmbox
 rhythmbox-dbg - debugging symbols for rhythmbox
 rhythmbox-dev - development files for the rhythmbox music player
 rhythmbox-doc - documentation files for the rhythmbox music player
 rhythmbox-mozilla - Rhythmbox Mozilla plugin
 rhythmbox-plugin-cdrecorder - burning plugin for rhythmbox music player
 rhythmbox-plugin-magnatune - Magnatune plugin for rhythmbox music player
 rhythmbox-plugin-visualizer - visualization plugin for rhythmbox music player
 rhythmbox-plugin-zeitgeist - zeitgeist plugin for rhythmbox music player
 rhythmbox-plugins - plugins for rhythmbox music player
Changes: 
 rhythmbox (2.97-1ubuntu2) quantal; urgency=low
 .
   * SECURITY UPDATE: fix insecure directory for python module import in
     context plugin
     - debian/patches/08_CVE-2012-3355.patch: update context plugin to use
       tempfile.mkdtemp() instead of /tmp/context. Patch thanks to
       Andreas Henriksson.
     - CVE-2012-3355
Checksums-Sha1: 
 d9ccecbdf82d6dccd2c14903c706fe2456edfca9 4186 rhythmbox_2.97-1ubuntu2.dsc
 62ce3d341e8864514f699dff17358aa061e637b5 44350 rhythmbox_2.97-1ubuntu2.debian.tar.gz
Checksums-Sha256: 
 894425e4f3bef8077a723a05f5d0237c686dfcf11865c69eae6a228744eb6cc8 4186 rhythmbox_2.97-1ubuntu2.dsc
 54cb024913d6a8de10461caa1c9302ef5857c317d5770583060a53f8cfd180dd 44350 rhythmbox_2.97-1ubuntu2.debian.tar.gz
Files: 
 735f2bd58d7552790eeff1cc9bb7ac3d 4186 gnome optional rhythmbox_2.97-1ubuntu2.dsc
 81c34169374794b2d995a604aaf02e89 44350 gnome optional rhythmbox_2.97-1ubuntu2.debian.tar.gz
Original-Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=Lhw1
-----END PGP SIGNATURE-----