-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 26 Apr 2021 12:23:17 +0200
Source: gst-plugins-base1.0
Architecture: source
Version: 1.10.4-1+deb9u2
Distribution: stretch-security
Urgency: medium
Maintainer: Maintainers of GStreamer packages <pkg-gstreamer-maintainers@lists.alioth.debian.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Changes:
gst-plugins-base1.0 (1.10.4-1+deb9u2) stretch-security; urgency=medium
.
* d/p/0001-tag-id3v2-fix-frame-size-check-and-potential-invalid-reads.patch:
+ Add upstream patch for fixing invalid reads during ID3v2 tag parsing
that can lead to application crashes.
Checksums-Sha1:
385db2a4c6dc2cb77d9c6dd3c14913066c7c2061 3809 gst-plugins-base1.0_1.10.4-1+deb9u2.dsc
c6749d515d49373f2e04e7a87f5fc5bcfa16d7ef 3059368 gst-plugins-base1.0_1.10.4.orig.tar.xz
7a323849713d36cb51cd78527c76c75f9fda140f 42504 gst-plugins-base1.0_1.10.4-1+deb9u2.debian.tar.xz
b377ac3a3e2f774f6629cd31c2e65b46ffb4c8dd 7472 gst-plugins-base1.0_1.10.4-1+deb9u2_source.buildinfo
Checksums-Sha256:
22b459a7f1bed07e2e92af9ca98ae1f42796c852f86453804c39e0bb6e5e0b97 3809 gst-plugins-base1.0_1.10.4-1+deb9u2.dsc
f6d245b6b3d4cb733f81ebb021074c525ece83db0c10e932794b339b8d935eb7 3059368 gst-plugins-base1.0_1.10.4.orig.tar.xz
14184f984509d53e77db72bcefdbe571bb4bb10c3505609c70c50c42dc19316a 42504 gst-plugins-base1.0_1.10.4-1+deb9u2.debian.tar.xz
a4b5a648907fb10894a055fcd837989ff451be04384b8fa7ac6ecce5da1d1bc1 7472 gst-plugins-base1.0_1.10.4-1+deb9u2_source.buildinfo
Files:
8c612514279d6d2d9d1afc743cc82d96 3809 libs optional gst-plugins-base1.0_1.10.4-1+deb9u2.dsc
f6b46f8fac01eb773d556e3efc369e86 3059368 libs optional gst-plugins-base1.0_1.10.4.orig.tar.xz
7ebca835493a088af1762ce4921118de 42504 libs optional gst-plugins-base1.0_1.10.4-1+deb9u2.debian.tar.xz
0e855174867413f948930a7f92e1c0ab 7472 libs optional gst-plugins-base1.0_1.10.4-1+deb9u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmCH1tkACgkQnUbEiOQ2
gwIPEhAApJZjsUbK50IWbziLVQJ0C/5GVSBTWVVUdtlO6zKGTRTCENuwAIR625HN
vJ4H7rbF/ZI+7yoR/PXT2/OKdA90yq/Znpk4mlxrOJmNGBgPcIo0e9hoABT4moF/
buMVAcHyqyKRRrzbhPjHTeQwGvdyI5W6ksDrLDcNnO05cQt1xQFFSn7GUmxYwwaI
g7rP/++yupqmVa7RppFGhPod+BeHIhL4B8aKzo2e9YaG3N7BjKZcaoOFKoykYI/8
Lec08rf9/Wotzz6UAovaFcZunxquGETs4mEGs1Rno3iErL9VzKEsztX1O1EVyqtS
7KBW7ClytzQgG1J5bPh0aaCg863KNmVUPart7mhsryUOSAhEQK1DlRy7YeFE5Yd+
a0h4mVmQ6iur5QptNZHRrqHlNOx90837ateZkTi1SP7rh+aJ7lMlLp1W5igjdB/Q
iPwUvA66qV/rC8CYChhHhoweJOvyic4GpGkNOquGt97C5drmsVrDZqIXSLkbtvBL
rdnCl5gv+1zV9Ay+jeoA7seQZ8BOSfqvVFCbob/OWCpmRAdU8pgo3wmvS3ZksGos
rzphPEO0cbKv6US/u5rNBdxs7j/Irxa2R4FaJjVvbCpeg4SZVHziWkBikEtQ2oql
rYi5A5apias06FnJPNq5okHSVPjt219F4Hby5mjgVG3e+HZeb10=
=JfmG
-----END PGP SIGNATURE-----
