Hi all, I have prepared a lenny package for the theora issues that are addressed in xulrunner. Note that two of them never got a CVE (one should probably be requested), but have been fixed ever since the first release of firefox 3.5. I think this should be a DSA. The package is at http://alioth.debian.org/~gilbert-guest/libtheora. Attached is the debdiff. Etch doesn't have the vulnerable code.
Mike
libtheora-lenny.debdiff
Description: Binary data
_______________________________________________ Secure-testing-team mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/secure-testing-team

