[Secure-testing-team] [Secure-testing-commits] r12708 - data/CVE

[Nico Golde]

Hi,
* Michael S Gilbert <michael.s.gilbert at gmail.com> [2009-08-31 01:37]:
> On Mon, 31 Aug 2009 00:01:08 +0200 Giuseppe Iuculano wrote:
> 
> > Michael S Gilbert ha scritto:
> > > fyi, here is the output of ldd for xulrunner 1.9.0.13:
> > > 
> > > $ ldd /usr/lib/xulrunner-1.9.1/xulrunner-bin 
> > 
> > This is for xulrunner-1.9.1.
> > 
> > > 	libxul.so => not found
> > 
> > Try with /usr/lib/xulrunner-1.9/libxul.so
> 
> as i continue this triage, is an ldd output containing the correct
> library sufficient evidence to say that the embed is completely fixed?

I'd say no, maintainers are evil and there might be still 
the chance that parts are used from the copy, I think 
looking at the source is mandatory.

Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - nion at jabber.ccc.de - GPG: 0xA0A0AAAA
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20090831/73d42de6/attachment.pgp>