debian-changes-digest Digest V2007 #141

From: <debian-changes-digest-request(at)lists.debian.org>
Date: Tue Dec 18 2007 - 05:30:22 EST

Content-Type: text/plain

debian-changes-digest Digest Volume 2007 : Issue 141

Today's Topics:

  Accepted phpmyadmin 4:2.9.1.1-5 (sou  [ Thijs Kinkhorst  ]
  Accepted link-grammar 4.2.2-4etch1 (  [ Steffen Joeris  ]
  Accepted ruby-gnome2 0.15.0-1.1etch1  [ Steffen Joeris  ]

Date: Tue, 18 Dec 2007 07:52:22 +0000
From: Thijs Kinkhorst <thijs@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted phpmyadmin 4:2.9.1.1-5 (source all)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Wed, 7 Nov 2007 13:30:08 +0100
Source: phpmyadmin
Binary: phpmyadmin
Architecture: source all
Version: 4:2.9.1.1-5
Distribution: stable-security
Urgency: high
Maintainer: Thijs Kinkhorst <thijs@debian.org> Changed-By: Thijs Kinkhorst <thijs@debian.org> Description:=20
 phpmyadmin - Administrate MySQL over the WWW Changes:=20
 phpmyadmin (4:2.9.1.1-5) stable-security; urgency=3Dhigh  .

• Update for etch to address a security issue.
• Muliple cross-site scripting (XSS) vulnerabilities in phpMyAdmin bef= ore 2.11.1.2 allow remote attackers to inject arbitrary web script or HT= ML via certain input available in (1) PHP_SELF in (a) server_status.php, an= d (b) grab_globals.lib.php, (c) display_change_password.lib.php, and (d) common.lib.php in libraries/; and certain input available in PHP_SEL= F and (2) PATH_INFO in libraries/common.inc.php. (CVE-2007-5589, PMASA-2007-6) Files:=20 64170774dbb881ab6079c75a673a7562 1011 web extra phpmyadmin_2.9.1.1-5.dsc 0c70dcfbb3770d8ac964f55bd00d405d 49397 web extra phpmyadmin_2.9.1.1-5.di= ff.gz 6d19ca77b29ef875866de796796fe787 3606180 web extra phpmyadmin_2.9.1.1-5_= all.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBRzG3tWz0hbPcukPfAQILnggAh6oTEwBlCnZrf+sUL4Mt3X6Kq0ylTYex ePxhGPF97BZAmfcmuCLW+6wPcODP8oQTxLziGYs0KiL2ddZhowlYDN9Yr1DdhVU7 Q93+lEOPEB2Yy7Je6zOtIx/sa30y1x4qyFWRV7eYAlaER7JJXba9/J3ttij/rNuo 5tr2XX3ArU+L0PpKtgLYJs2cvzz/dKJN4vXWX1KrvoilVsWPTkmWPE4YY+r+WXr0 dAG4JuPg/0Ft/6IgFZnFctkXJtH8E9lSGlaHz8LEkCXV7Fe8/JC2Y+l/nf1WKsOv fun5/t7/JLbzJkHDERx2s9Ir1AJYx6N9pmxsYANfCKLiIF/dWPJmvA=3D=3D =3DO7US
-----END PGP SIGNATURE-----
Accepted:
phpmyadmin_2.9.1.1-5.diff.gz
  to pool/main/p/phpmyadmin/phpmyadmin_2.9.1.1-5.diff.gz phpmyadmin_2.9.1.1-5.dsc
  to pool/main/p/phpmyadmin/phpmyadmin_2.9.1.1-5.dsc phpmyadmin_2.9.1.1-5_all.deb
  to pool/main/p/phpmyadmin/phpmyadmin_2.9.1.1-5_all.deb

Date: Tue, 18 Dec 2007 07:52:42 +0000
From: Steffen Joeris <white@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted link-grammar 4.2.2-4etch1 (source all i386)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Mon, 10 Dec 2007 18:29:47 +0000
Source: link-grammar
Binary: link-grammar-dictionaries-en liblink-grammar4 liblink-grammar4-de= v link-grammar
Architecture: source all i386
Version: 4.2.2-4etch1
Distribution: stable-security
Urgency: high
Maintainer: Ken Bloom <kbloom@gmail.com> Changed-By: Steffen Joeris <white@debian.org> Description:=20
 liblink-grammar4 - Carnegie Mellon University's link grammar parser for = English
 liblink-grammar4-dev - Carnegie Mellon University's link grammar parser = for English
 link-grammar - Carnegie Mellon University's link grammar parser for Engl= ish
 link-grammar-dictionaries-en - Carnegie Mellon University's link grammar=  parser for English
Changes:=20
 link-grammar (4.2.2-4etch1) stable-security; urgency=3Dhigh  .

• Non-maintainer upload by the security team
• Fix stack-based buffer overflow in the separate_word function in tokenize.c to prevent remote attackes to execute arbitrary code Fixes: CVE-2007-5395 Files:=20 535a962c3aefbf92b3d09bd9355d3b57 669 text optional link-grammar_4.2.2-4e= tch1.dsc 798c165b7d7f26e60925c30515c45782 742163 text optional link-grammar_4.2.2= .orig.tar.gz fa03dfbb7a2e0a47130c9f1385eb48d3 8231 text optional link-grammar_4.2.2-4= etch1.diff.gz 52ef5d6278b5f8a5a0c0894b3d99235e 267530 text optional link-grammar-dicti= onaries-en_4.2.2-4etch1_all.deb 9b43845e6fdb26319c4dd3d88afe5fb4 15458 text optional link-grammar_4.2.2-= 4etch1_i386.deb ffa178b41a336d1a9e11bca02a3d2232 89456 libs optional liblink-grammar4_4.= 2.2-4etch1_i386.deb 50b911abcf134bffe48bd599b7c42050 111356 libdevel optional liblink-gramma= r4-dev_4.2.2-4etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHXYrR62zWxYk/rQcRAppkAJ9ZuPvsLxK3aSA6oWOzSOM9/b7QYQCeLxxw 2i/RSXXGrZKMs7T8VHiW2T8=3D
=3D4vM5
-----END PGP SIGNATURE-----
Accepted:
liblink-grammar4-dev_4.2.2-4etch1_i386.deb   to pool/main/l/link-grammar/liblink-grammar4-dev_4.2.2-4etch1_i386.deb liblink-grammar4_4.2.2-4etch1_i386.deb
  to pool/main/l/link-grammar/liblink-grammar4_4.2.2-4etch1_i386.deb link-grammar-dictionaries-en_4.2.2-4etch1_all.deb   to pool/main/l/link-grammar/link-grammar-dictionaries-en_4.2.2-4etch1_a= ll.deb
link-grammar_4.2.2-4etch1.diff.gz
  to pool/main/l/link-grammar/link-grammar_4.2.2-4etch1.diff.gz link-grammar_4.2.2-4etch1.dsc
  to pool/main/l/link-grammar/link-grammar_4.2.2-4etch1.dsc link-grammar_4.2.2-4etch1_i386.deb
  to pool/main/l/link-grammar/link-grammar_4.2.2-4etch1_i386.deb

Date: Tue, 18 Dec 2007 07:52:18 +0000
From: Steffen Joeris <white@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted ruby-gnome2 0.15.0-1.1etch1 (source i386 all)

Message-Id: 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Mon, 10 Dec 2007 10:56:01 +0000
Source: ruby-gnome2

Binary: libgnome2-ruby libatk1-ruby libglib2-ruby librsvg2-ruby libpanel-=
applet2-ruby libgnomecanvas2-ruby libgnomeprintui2-ruby libvte-ruby libgl=
ade2-ruby libgtk2-ruby libgnomeprint2-ruby libart2-ruby libpango1-ruby li=
bgdk-pixbuf2-ruby libgconf2-ruby libgtkglext1-ruby libgda2-ruby libgtkhtm=
l2-ruby libgtk-mozembed-ruby libgtksourceview1-ruby libgnomevfs2-ruby lib=

gstreamer0.8-ruby ruby-gnome2
Architecture: source i386 all
Version: 0.15.0-1.1etch1
Distribution: stable-security
Urgency: high
Maintainer: Dafydd Harries <daf@debian.org> Changed-By: Steffen Joeris <white@debian.org> Description:=20
 libart2-ruby - Libart 2 bindings for the Ruby language  libatk1-ruby - ATK bindings for the Ruby language  libgconf2-ruby - GConf 2 bindings for the Ruby language  libgda2-ruby - GDA bindings for the Ruby language  libgdk-pixbuf2-ruby - Gdk-Pixbuf 2 bindings for the Ruby language  libglade2-ruby - Libglade 2 bindings for the Ruby language  libglib2-ruby - Glib 2 bindings for the Ruby language  libgnome2-ruby - GNOME 2 bindings for the Ruby language  libgnomecanvas2-ruby - GNOME Canvas 2 bindings for the Ruby language  libgnomeprint2-ruby - GNOME print bindings for the Ruby language  libgnomeprintui2-ruby - GNOME print user interface bindings for the Ruby=  language
 libgnomevfs2-ruby - GNOME VFS 2 bindings for the Ruby language  libgstreamer0.8-ruby - GStreamer 0.8 bindings for the Ruby language  libgtk-mozembed-ruby - ruby binding of GtkMozEmbed, gecko renderer  libgtk2-ruby - GTK+ bindings for the Ruby language  libgtkglext1-ruby - GTK+ GL extension bindings for the Ruby language  libgtkhtml2-ruby - GtkHTML bindings for the Ruby language  libgtksourceview1-ruby - GTKSourceView bindings for the Ruby language  libpanel-applet2-ruby - GNOME 2 panel applet library bindings for the Ru= by language
 libpango1-ruby - Pango bindings for the Ruby language  librsvg2-ruby - RSVG renderer bindings for the Ruby language  libvte-ruby - VTE widget bindings for the Ruby language  ruby-gnome2 - GNOME-related bindings for the Ruby language Changes:=20
 ruby-gnome2 (0.15.0-1.1etch1) stable-security; urgency=3Dhigh  .

• Non-maintainer upload by the security team
• Included CVE-2007-6183.patch to fix format string vulnerability in rbgtkmessagedialog.c which might lead to arbitrary code execution Fixes: CVE-2007-6183 Files:=20 1d11184f4cd513f525cc75a9dfb79cfb 1353 libs extra ruby-gnome2_0.15.0-1.1e= tch1.dsc 3e5b89b674a2b60ff9d3a2eeac0468e9 1273856 libs extra ruby-gnome2_0.15.0.o= rig.tar.gz d909d8bf0c7f82cf6da91feee15e2afa 13118 libs extra ruby-gnome2_0.15.0-1.1= etch1.diff.gz 5bdc3271598d77efc2dced0857636904 21698 libs extra ruby-gnome2_0.15.0-1.1= etch1_all.deb 321e51b411607c38b446f23384ce5d62 114082 libs extra libglib2-ruby_0.15.0-= 1.1etch1_i386.deb 362df0f0188f3fa5889d85f700765e03 43908 libs extra libatk1-ruby_0.15.0-1.= 1etch1_i386.deb e7864ef441c3c995acd4bdd36a19ec2d 70506 libs extra libpango1-ruby_0.15.0-= 1.1etch1_i386.deb 96821ae440196a6c928512ccc33381c8 46368 libs extra libgdk-pixbuf2-ruby_0.= 15.0-1.1etch1_i386.deb c7359b88942dc42587523de655f1c7f0 619806 libs extra libgtk2-ruby_0.15.0-1= .1etch1_i386.deb 9897c5555f5def91bdbe4090f1f161f3 41726 libs extra libart2-ruby_0.15.0-1.= 1etch1_i386.deb 2c20013fee56e18eb7389c92ff952e78 70494 libs extra libgnomecanvas2-ruby_0= .15.0-1.1etch1_i386.deb ab78c95b641421937ce1de17ca9b5488 93998 libs extra libgnome2-ruby_0.15.0-= 1.1etch1_i386.deb 2f21221a1035d307705ceb0bf9e54ba7 36546 libs extra libgconf2-ruby_0.15.0-= 1.1etch1_i386.deb 37d491fadf19abb53ad776e9f1a59248 37088 libs extra libglade2-ruby_0.15.0-= 1.1etch1_i386.deb 04a4aa3e725f573a4865e50860200bb5 35552 libs extra libgtkhtml2-ruby_0.15.= 0-1.1etch1_i386.deb fa4927eb8797e82d698d7f1e08520008 53186 libs extra libgda2-ruby_0.15.0-1.= 1etch1_i386.deb 8d23f11cbb7effe085154f1e8e31b934 42166 libs extra libgtkglext1-ruby_0.15= .0-1.1etch1_i386.deb dd3444bf914c95c69fce2c4c1f3d92ed 46986 libs extra libgnomevfs2-ruby_0.15= .0-1.1etch1_i386.deb 122bd0c604007481eab5cfd5ad7fcfd8 69324 libs extra libgstreamer0.8-ruby_0= .15.0-1.1etch1_i386.deb d7e2106f6725ceb2e8296ba413542d4d 35540 libs extra libgtksourceview1-ruby= _0.15.0-1.1etch1_i386.deb 201f94a15940bbf8fe70bddc84362112 28394 libs extra libpanel-applet2-ruby_= 0.15.0-1.1etch1_i386.deb d91b89caa996296f33f72547d0a8b9f0 51858 libs extra libgnomeprint2-ruby_0.= 15.0-1.1etch1_i386.deb 362a6d7646054170789029b232abab13 38204 libs extra libgnomeprintui2-ruby_= 0.15.0-1.1etch1_i386.deb 089c102461389086aec183756cc9706b 28926 libs extra librsvg2-ruby_0.15.0-1= .1etch1_i386.deb 5b11b3a973c869f903ed607043e4cd81 30142 libs extra libgtk-mozembed-ruby_0= .15.0-1.1etch1_i386.deb 80bd24aae784489c781f2cabce080abf 32162 libs extra libvte-ruby_0.15.0-1.1= etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHXV0G62zWxYk/rQcRAuWpAKDG/NKnFDTIsyhWJykJLrKtNZJpHgCfemCK 4cGnqNoQj4q/K0uFYqCu/RQ=3D
=3DYH3n
-----END PGP SIGNATURE-----
Accepted:
libart2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libart2-ruby_0.15.0-1.1etch1_i386.deb libatk1-ruby_0.15.0-1.1etch1_i386.deb

  to pool/main/r/ruby-gnome2/libatk1-ruby_0.15.0-1.1etch1_i386.deb
libgconf2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libgconf2-ruby_0.15.0-1.1etch1_i386.deb

libgda2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libgda2-ruby_0.15.0-1.1etch1_i386.deb libgdk-pixbuf2-ruby_0.15.0-1.1etch1_i386.deb

  to pool/main/r/ruby-gnome2/libgdk-pixbuf2-ruby_0.15.0-1.1etch1_i386.deb
libglade2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libglade2-ruby_0.15.0-1.1etch1_i386.deb

libglib2-ruby_0.15.0-1.1etch1_i386.deb

  to pool/main/r/ruby-gnome2/libglib2-ruby_0.15.0-1.1etch1_i386.deb
libgnome2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libgnome2-ruby_0.15.0-1.1etch1_i386.deb

libgnomecanvas2-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgnomecanvas2-ruby_0.15.0-1.1etch1_i386.de= b
libgnomeprint2-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgnomeprint2-ruby_0.15.0-1.1etch1_i386.deb libgnomeprintui2-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgnomeprintui2-ruby_0.15.0-1.1etch1_i386.d= eb
libgnomevfs2-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgnomevfs2-ruby_0.15.0-1.1etch1_i386.deb libgstreamer0.8-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgstreamer0.8-ruby_0.15.0-1.1etch1_i386.de= b
libgtk-mozembed-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgtk-mozembed-ruby_0.15.0-1.1etch1_i386.de= b
libgtk2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libgtk2-ruby_0.15.0-1.1etch1_i386.deb libgtkglext1-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgtkglext1-ruby_0.15.0-1.1etch1_i386.deb libgtkhtml2-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgtkhtml2-ruby_0.15.0-1.1etch1_i386.deb libgtksourceview1-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libgtksourceview1-ruby_0.15.0-1.1etch1_i386.= deb
libpanel-applet2-ruby_0.15.0-1.1etch1_i386.deb   to pool/main/r/ruby-gnome2/libpanel-applet2-ruby_0.15.0-1.1etch1_i386.d= eb
libpango1-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libpango1-ruby_0.15.0-1.1etch1_i386.deb librsvg2-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/librsvg2-ruby_0.15.0-1.1etch1_i386.deb libvte-ruby_0.15.0-1.1etch1_i386.deb
  to pool/main/r/ruby-gnome2/libvte-ruby_0.15.0-1.1etch1_i386.deb ruby-gnome2_0.15.0-1.1etch1.diff.gz
  to pool/main/r/ruby-gnome2/ruby-gnome2_0.15.0-1.1etch1.diff.gz ruby-gnome2_0.15.0-1.1etch1.dsc
  to pool/main/r/ruby-gnome2/ruby-gnome2_0.15.0-1.1etch1.dsc ruby-gnome2_0.15.0-1.1etch1_all.deb
  to pool/main/r/ruby-gnome2/ruby-gnome2_0.15.0-1.1etch1_all.deb

End of debian-changes-digest Digest V2007 Issue #141

---

Received on Tue Dec 18 05:30:47 2007