[Secure-testing-team] Bug#605096: CVE-2010-4005

[Moritz Muehlenhoff]

Package: tomboy
Severity: grave
Tags: security


Please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4005
for details and a patch. Please fix this for Squeeze with a targeted
bugfix, not by packaging a full new upstream release.

Cheers,
        Moritz

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages tomboy depends on:
ii  gconf2                        2.28.1-6   GNOME configuration database syste
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
pn  libgconf2.0-cil               <none>     (no description available)
ii  libglib2.0-0                  2.24.2-1   The GLib library of C routines
pn  libglib2.0-cil                <none>     (no description available)
pn  libgmime2.2-cil               <none>     (no description available)
pn  libgnome2.0-cil               <none>     (no description available)
pn  libgnomeprint2.2-0            <none>     (no description available)
pn  libgnomeprintui2.2-0          <none>     (no description available)
ii  libgtk2.0-0                   2.20.1-2   The GTK+ graphical user interface 
pn  libgtk2.0-cil                 <none>     (no description available)
ii  libgtkspell0                  2.0.16-1   a spell-checking addon for GTK's T
pn  libmono-addins-gui0.2-cil     <none>     (no description available)
pn  libmono-addins0.2-cil         <none>     (no description available)
pn  libmono-corlib2.0-cil         <none>     (no description available)
pn  libmono-system2.0-cil         <none>     (no description available)
pn  libmono2.0-cil                <none>     (no description available)
pn  libndesk-dbus-glib1.0-cil     <none>     (no description available)
pn  libndesk-dbus1.0-cil          <none>     (no description available)
pn  libpanel-applet2-0            <none>     (no description available)
ii  libpango1.0-0                 1.28.3-1   Layout and rendering of internatio
ii  libx11-6                      2:1.3.3-4  X11 client-side library
pn  mono-runtime                  <none>     (no description available)

tomboy recommends no packages.

Versions of packages tomboy suggests:
pn  evolution                     <none>     (no description available)