[Secure-testing-team] Bug#605095: CVE-2010-3998

[Moritz Muehlenhoff]

Package: banshee
Severity: grave
Tags: security

Hi,
please see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3998
for details and a patch. Please upload a targeted fix for Squeeze
and not a whole new upstream release.

Cheers,
        Moritz

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.ISO-8859-15 at euro (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash

Versions of packages banshee depends on:
pn  gstreamer0.10-gnomevfs        <none>     (no description available)
pn  gstreamer0.10-plugins-base    <none>     (no description available)
pn  gstreamer0.10-plugins-good    <none>     (no description available)
ii  hal                           0.5.14-3   Hardware Abstraction Layer
pn  libboo2.0-cil                 <none>     (no description available)
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
ii  libcairo2                     1.8.10-6   The Cairo 2D vector graphics libra
pn  libgconf2.0-cil               <none>     (no description available)
pn  libglade2.0-cil               <none>     (no description available)
ii  libglib2.0-0                  2.24.2-1   The GLib library of C routines
pn  libglib2.0-cil                <none>     (no description available)
pn  libgnome2.0-cil               <none>     (no description available)
ii  libgstreamer-plugins-base0.10 0.10.30-1  GStreamer libraries from the "base
ii  libgstreamer0.10-0            0.10.30-1  Core GStreamer libraries and eleme
ii  libgtk2.0-0                   2.20.1-2   The GTK+ graphical user interface 
pn  libgtk2.0-cil                 <none>     (no description available)
pn  libmono-addins-gui0.2-cil     <none>     (no description available)
pn  libmono-addins0.2-cil         <none>     (no description available)
pn  libmono-cairo2.0-cil          <none>     (no description available)
pn  libmono-corlib2.0-cil         <none>     (no description available)
pn  libmono-sharpzip2.84-cil      <none>     (no description available)
pn  libmono-sqlite2.0-cil         <none>     (no description available)
pn  libmono-system-data2.0-cil    <none>     (no description available)
pn  libmono-system-web2.0-cil     <none>     (no description available)
pn  libmono-system2.0-cil         <none>     (no description available)
pn  libmono2.0-cil                <none>     (no description available)
pn  libmtp7                       <none>     (no description available)
pn  libndesk-dbus-glib1.0-cil     <none>     (no description available)
pn  libndesk-dbus1.0-cil          <none>     (no description available)
pn  libnotify0.4-cil              <none>     (no description available)
ii  libpango1.0-0                 1.28.3-1   Layout and rendering of internatio
pn  libtaglib2.0-cil              <none>     (no description available)
ii  libx11-6                      2:1.3.3-4  X11 client-side library
pn  mono-runtime                  <none>     (no description available)

Versions of packages banshee recommends:
pn  brasero                       <none>     (no description available)
ii  gstreamer0.10-ffmpeg          0.10.10-1  FFmpeg plugin for GStreamer
pn  gstreamer0.10-plugins-bad     <none>     (no description available)
pn  gstreamer0.10-plugins-ugly    <none>     (no description available)
pn  podsleuth                     <none>     (no description available)

banshee suggests no packages.