-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 15 Nov 2009 21:43:06 +0100 Source: libvorbis Binary: libvorbis0a libvorbis-dev libvorbisenc2 libvorbisfile3 Architecture: source i386 Version: 1.1.2.dfsg-1.4+etch1 Distribution: oldstable-security Urgency: high Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint@lists.alioth.debian.org> Changed-By: Giuseppe Iuculano <iuculano@debian.org> Description: libvorbis-dev - The Vorbis General Audio Compression Codec (development files) libvorbis0a - The Vorbis General Audio Compression Codec libvorbisenc2 - The Vorbis General Audio Compression Codec libvorbisfile3 - The Vorbis General Audio Compression Codec Closes: 540958 Changes: libvorbis (1.1.2.dfsg-1.4+etch1) oldstable-security; urgency=high . [ Peter Samuelson ] * Fix CVE-2009-2663: two bugs in libvorbis that allowed a crafted ogg file to corrupt memory. (Closes: #540958) . [ Giuseppe Iuculano ] * Fixed CVE-2009-3379: A crafted ogg file could cause an application using libvorbis to crash or, possibly, execute arbitrary code when opened. Files: 2a9e6b4dcd72e8bc8cf956404a1fb7ca 808 libs optional libvorbis_1.1.2.dfsg-1.4+etch1.dsc 2e11d2c0176fd0a8e796e80667a681d8 17870 libs optional libvorbis_1.1.2.dfsg-1.4+etch1.diff.gz d84b4ff35636254f8b79c4a1817a9f1b 98656 libs optional libvorbis0a_1.1.2.dfsg-1.4+etch1_i386.deb 8162e49e13fdd5f4f90b5e04737aef5b 75688 libs optional libvorbisenc2_1.1.2.dfsg-1.4+etch1_i386.deb ddf590ab7c51f75015815e7500c73c02 19096 libs optional libvorbisfile3_1.1.2.dfsg-1.4+etch1_i386.deb 419e92bd2278385d2332485bfb5ec1c4 455630 libdevel optional libvorbis-dev_1.1.2.dfsg-1.4+etch1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAksH8YkACgkQNxpp46476aqRwwCeIPJhquvnCdmUulkku+UyiEyH /coAnjs7AbubnWl+i7FCP2l7AwQB+fOF =eDnA -----END PGP SIGNATURE----- Accepted: libvorbis-dev_1.1.2.dfsg-1.4+etch1_i386.deb to main/libv/libvorbis/libvorbis-dev_1.1.2.dfsg-1.4+etch1_i386.deb libvorbis0a_1.1.2.dfsg-1.4+etch1_i386.deb to main/libv/libvorbis/libvorbis0a_1.1.2.dfsg-1.4+etch1_i386.deb libvorbis_1.1.2.dfsg-1.4+etch1.diff.gz to main/libv/libvorbis/libvorbis_1.1.2.dfsg-1.4+etch1.diff.gz libvorbis_1.1.2.dfsg-1.4+etch1.dsc to main/libv/libvorbis/libvorbis_1.1.2.dfsg-1.4+etch1.dsc libvorbisenc2_1.1.2.dfsg-1.4+etch1_i386.deb to main/libv/libvorbis/libvorbisenc2_1.1.2.dfsg-1.4+etch1_i386.deb libvorbisfile3_1.1.2.dfsg-1.4+etch1_i386.deb to main/libv/libvorbis/libvorbisfile3_1.1.2.dfsg-1.4+etch1_i386.deb