-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 27 Aug 2019 13:29:39 -0400 Source: faad2 Architecture: source Version: 2.8.8-3.1 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Hugo Lefeuvre <hle@debian.org> Closes: 914641 Changes: faad2 (2.8.8-3.1) unstable; urgency=medium . * Non-maintainer upload with maintainer's permission. * CVE-2019-6956: Buffer over read in the function ps_mix_phase() (libfaad/ps_dec.c) (Closes: #914641). * CVE-2018-20196: Stack buffer overflow in the function calculate_gain (libfaad/sbr_hfadj.c). * CVE-2018-20199, CVE-2018-20360: NULL pointer dereference in the function ifilter_bank (libfaad/filtbank.c). Checksums-Sha1: d6eb36089ffff2140410882ba3313231765f577b 1928 faad2_2.8.8-3.1.dsc adf15aba659252a157adba375b88dc246f7ff39a 11612 faad2_2.8.8-3.1.debian.tar.xz c86395ce7a4b3e913eee2466d86652b01ae166fa 6425 faad2_2.8.8-3.1_amd64.buildinfo Checksums-Sha256: 985c05aca1682bd45d0879efa9b4260d63501a906eee525e051f410be89838a1 1928 faad2_2.8.8-3.1.dsc f457a53c8dd18774acbce8c9a03b515fc98d33caca632f7659f4a1e363b2b68c 11612 faad2_2.8.8-3.1.debian.tar.xz e3ecda45c6e892b6c507605c25d6fe91391c709048ef9ded1ba2e432bd15093d 6425 faad2_2.8.8-3.1_amd64.buildinfo Files: 3703f5bad64a5694f91cc36b828cbc30 1928 libs optional faad2_2.8.8-3.1.dsc 86baea7c2fd64ba2a0cc0bf71bc5d831 11612 libs optional faad2_2.8.8-3.1.debian.tar.xz bff76971c6c23b6901af8f19a4bc20b6 6425 libs optional faad2_2.8.8-3.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQHDBAEBCgAtFiEEeDb9QWtkMa2LX4zREeMFjl5EGkIFAl1mmQIPHGhsZUBkZWJp YW4ub3JnAAoJEBHjBY5eRBpC/kgMAIkfToyfIgMyc3fXe7ePReeM9uE2X8bKV7DS EFxzLENsM0/9KwgS6EBWHK6dCgE8r1i3o8K5qbfslVKZGb5/hbQu6S3ES9I6S6it sLQZzeTrfj+WI3+sV4ctKPDDaloO8G8WrvxYOtZrRprOPXVQQozi9AOUhgj9r+tv HIPo64RelyXsqioH+TCLj4bWh+FmygLH7reczdoTPRj9h1Owvda9Kl2ZNuUgnKc+ Q7R/4Cv++ltmQ//QOm2Qv8ZFvtRdOsmMjg0i0Z+8l8DWojcPBcPRYv7rAWk8H6Hr zq/yD27aOCfHvvm694upnm+/dkMGR2UulBxZu8BJ/IJHmlZIXjGLX999NK7/To5J 5rhh+Sudz9Xh2F/hxopzs/XvO8DpUEgttSFCy6Ff0dsAwYFj7ozEzjUE7NPhW16G VEEi4rAX1fZIGOetxd1dk/Ef5ThwDnkMFkgf+UqHsgAqgCJgjtk6GKGngNnc1ZNI 2UyZ60iNNnRcaIMVqxmDonB5qj5dyw== =ZUwY -----END PGP SIGNATURE-----
