Thanks Jonathan.

I slightly amended the changelog to reflect the different fixed CVEs and
use our consistent style for referencing launchpad bugs:

  * SECURITY UPDATE: krfb: multiple security issues in libvncserver.
    (LP: #1374043)
    - Add upstream_libvncserver-vulnerabilities.diff
    - http://www.kde.org/info/security/advisory-20140923-1.txt
    - CVE-2014-6053
    - CVE-2014-6054
    - CVE-2014-6055

Please use something similar for your Utopic upload. (I built a
4:4.14.0-0ubuntu2.1 in our security ppa for Utopic, but I forgot you can
upload to Utopic directly without jumping through the security sponsor
process; I can't recall if launchpad will give you trouble if you try to
use the same version number I did, but if you get an error message that
doesn't make sense, this might be it.)

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1374043

Title:
  vulnerabilities in libvncserver

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krfb/+bug/1374043/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to