Bug 5025 - Banshee: security issue with SSL certificate validation
Summary: Banshee: security issue with SSL certificate validation
Status: RESOLVED WONTFIX
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 1
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Shlomi Fish
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-03-19 12:18 CET by Olav Vitters
Modified: 2012-12-02 14:36 CET (History)
0 users

See Also:
Source RPM: banshee
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Olav Vitters 2012-03-19 12:18:37 CET 
Banshee doesn't check SSL certificates

This was fixed in http://git.gnome.org/browse/banshee/patch/?id=3e1728264da3af9fb164bb8e27814f2f266e4e0d

I submitted that, but patch doesn't apply for Mageia 1.

I'm not the maintainer, that is shlomif (please assign to him)
Comment 1 Shlomi Fish 2012-04-05 13:02:18 CEST 
Would it be possible to upgrade banshee to the latest version in the Mageia 1 updates? What is the policy regarding it?

Regards,

-- Shlomi Fish
Comment 2 Manuel Hiebel 2012-05-09 21:20:46 CEST 
make a patch if possible
Manuel Hiebel 2012-09-25 23:29:41 CEST

Source RPM: (none) => banshee

Comment 3 Manuel Hiebel 2012-11-05 16:53:50 CET 
This message is a reminder that Mageia 1 is nearing its end of life. 
In approximately 25 days from now, Mageia will stop maintaining and issuing 
updates for Mageia 1. At that time this bug will be closed as WONTFIX (EOL) if it 
remains open with a Mageia 'version' of '1'.

Package Maintainer: If you wish for this bug to remain open because you plan to 
fix it in a currently maintained version, simply change the 'version' to a later 
Mageia version prior to Mageia 1's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that we may not 
be able to fix it before Mageia 1 is end of life.  If you would still like to see 
this bug fixed and are able to reproduce it against a later version of Mageia, 
you are encouraged to click on "Version" and change it against that version 
of Mageia.

Although we aim to fix as many bugs as possible during every release's lifetime, 
sometimes those efforts are overtaken by events. Often a more recent Mageia 
release includes newer upstream software that fixes bugs or makes them obsolete.

--
Mageia Bugsquad
Comment 4 Shlomi Fish 2012-11-05 18:30:30 CET 
Hi Olav,

(In reply to comment #0)
> Banshee doesn't check SSL certificates
> 
> This was fixed in
> http://git.gnome.org/browse/banshee/patch/?id=3e1728264da3af9fb164bb8e27814f2f266e4e0d
> 
> I submitted that, but patch doesn't apply for Mageia 1.
> 
> I'm not the maintainer, that is shlomif (please assign to him)

are you still using Mageia 1? Or can we close this bug because backporting the patch would be too much work?

Regards,

-- Shlomi Fish
Comment 5 Manuel Hiebel 2012-12-02 14:36:19 CET 
Mageia 1 changed to end-of-life (EOL) status on ''1st December''. Mageia 1 is no 
longer maintained, which means that it will not receive any further security or 
bug fix updates. As a result we are closing this bug. 

If you can reproduce this bug against a currently maintained version of Mageia 
please feel free to click on "Version" change it against that version of Mageia
and reopen this bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

--
Mageia Bugsquad

Status: NEW => RESOLVED
Resolution: (none) => WONTFIX
Note You need to log in before you can comment on or make changes to this bug.