Bug 38533

Summary: ia32-libs: Multiple issues (3.2)
Product: UCS Reporter: Arvid Requate <requate>
Component: Security updatesAssignee: Arvid Requate <requate>
Status: CLOSED FIXED QA Contact: Janek Walkenhorst <walkenhorst>
Severity: normal    
Priority: P2 Flags: requate: Patch_Available+
Version: UCS 3.2   
Target Milestone: UCS 3.2-5-errata   
Hardware: Other   
OS: Linux   
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional): Security
Max CVSS v3 score:

Description Arvid Requate univentionstaff 2015-05-13 12:55:06 CEST 
An updated version of ia32-libs (20150413) is available in squeeze-lts, which fixes a couple of security issues.
Comment 1 Arvid Requate univentionstaff 2015-05-13 15:59:50 CEST 
The suqeeze-lts version has been imported and built in errata3.2-5.

The new version depends on two additional binary packages, which are not maintained yet and thus would block the update:

  lib32ncurses5 lib32v4l-0

The corresponding source packages ncurses and v4l-utils have been imported into the scope. While the built of ncurses went fine, the built of v4l-utils package version 0.8.0-1 failed due to a missing header file (linux/videodev.h) which was provided by the binary package linux-libc-dev (Source: linux-2.6.32) in UCS 3.0.
As a workaround I copied the binary packages from UCS 3.0 into the errata3.2-5 scope (rather than importing 0.8.6 from squeeze-backports).

The two binary packages have been added to the ucs_3.2-5_amd64_dvd.txt list.

Advisory: 2015-05-13-ia32-libs.yaml
Comment 2 Janek Walkenhorst univentionstaff 2015-05-15 17:33:55 CEST 
Advisory: OK (typo corrected)
Tests (amd64): OK