[Secure-testing-team] lenny packages for libtheora issues

[Michael Gilbert]

Hi all,

I have prepared a lenny package for the theora issues that are
addressed in xulrunner. Note that two of them never got a CVE
(one should probably be requested), but have been fixed ever since
the first release of firefox 3.5. I think this should be a DSA.  The
package is at http://alioth.debian.org/~gilbert-guest/libtheora.
Attached is the debdiff.  Etch doesn't have the vulnerable code.

Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libtheora-lenny.debdiff
Type: application/octet-stream
Size: 9451 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20100116/660cf462/attachment.obj>