Bug#654270: gnusound: FTBFS on armhf, reproduced on amd64: "error: format not a string literal and no format arguments [-Werror=format-security]"

[Marc Dequènes (Duck)]

Coin,

Quoting Jonathan Nieder <jrnie...@gmail.com>:

Format string includes filename, which I believe can be arbitrary.
Looks like a low-severity security bug.  (Attacker tricks victim
into opening sound file with funny name.  Then...)

Yes, that's true for any package needing a format-security patch.



Regards.

--
Marc Dequènes (Duck)

I'll prepare a package for stable, but i'm gonna solve the problem in unstable by a removal, as nobody has stepped to handle maintainership since i asked for help on #622013 and alerted the GNU application maintainer.

pgpGmZXdyczIl.pgp
Description: PGP Digital Signature