merge 572920 561857
thanks

Hi!

On Mon, Mar 08, 2010 at 05:02:44PM +0100, Michał Mirosław wrote:
> I just verified, that removing cve-2009-3736.patch from series file and
> rebuilding libltdl3 package fixes mpg123. That patch stops libltdl from
> looking in CWD for .la files and that breaks mpg123 module loading.
> 
> In case of mpg123 it does:
> 
> chdir("/usr/lib/mpg123");
> lt_dlopen("type_module.la");
> 
> BTW, when passing '-o /../X' mpg123 will happily lt_dlopen("type_/../X.la"),
> but that's another story.

This was also reported as #561857, and is fixed in unstable and testing
already. I'll see to get an update in stable as well. As a workaround, mpg123
can be started like this in the meantime:

LD_LIBRARY_PATH=/usr/lib/mpg123 mpg123

Regards,

Daniel.



--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to