217158 2008-04-10 16:34 0000 media-libs/swfdec <0.6.4 Remote file disclosure (CVE-2008-1834) 2008-04-16 17:27:03 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Linux RESOLVED FIXED http://lists.freedesktop.org/archives/swfdec/2008-April/001321.html ~3 [noglsa] P2 trivial --- 1 toto@darkside.tomsk.ru security@gentoo.org pclouds@gentoo.org toto@darkside.tomsk.ru 2008-04-10 16:34:24 0000 Here's the release of Swfdec 0.6.4. This is a security release, please update as soon as possible. swfdec-0.6.4 "College Humor" http://swfdec.freedesktop.org/download/swfdec/0.6/swfdec-0.6.4.tar.gz MD5: a1568696246889109b884cb5434e81fc fixes in this release: - fix a security problem that allowed remote Flash files to read local files. - fix a rare crash in TextField.replaceText - fix a rare crash during cleanup Swfdec still follows the no-crashes-allowed policy. Should you still succeed in finding a crasher, please immediately file a bug at https://bugs.freedesktop.org. For more information about Swfdec, see http://swfdec.freedesktop.org Cheers, Benjamin Reproducible: Always keytoaster@gentoo.org 2008-04-10 17:03:59 0000 Maintainer, please bump. pclouds@gentoo.org 2008-04-11 06:29:37 0000 0.6.4 in CVS. rbu@gentoo.org 2008-04-11 12:18:10 0000 Thank you.