-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Nov 2025 10:22:40 +0100 Source: rplay Architecture: source Version: 3.3.2-22 Distribution: unstable Urgency: medium Maintainer: Thorsten Alteholz <debian@alteholz.de> Changed-By: Thorsten Alteholz <debian@alteholz.de> Closes: 118224 1039352 Changes: rplay (3.3.2-22) unstable; urgency=medium . * CVE-2025-62672 fix SIGSEGV with crafted packets in rplay_unpack() (Closes: #118224) Unfortunately this issue can not be fixed in rplay_unpack(), so this function has been deprecated and a new function rplay_unpack_n() has been introduced. The old function rplay_unpack() now always returns an error. According to codesearch.d.n, rplay_unpack() is only used in rplay itself but not in any reverse dependency, so no other package should be affected by this change. * rplay-server: add systemd unit file (Closes: #1039352) Checksums-Sha1: 53a4f630f79c9fdbaffb4c1e37a928c62b16fcd9 2364 rplay_3.3.2-22.dsc fda94b7e7c91c4d09bf1f0535ba4647799c7cba0 476308 rplay_3.3.2.orig.tar.gz 05350777db625dc0c912c63e72d38b730830e590 40592 rplay_3.3.2-22.debian.tar.xz 657a73380deab9b79e0f513cb22ece5d3728565a 9139 rplay_3.3.2-22_amd64.buildinfo Checksums-Sha256: ab72eda93ec635e5def189b7e5375af0de8f40f1e5a72235b169bdbb9fc25bfa 2364 rplay_3.3.2-22.dsc 63e99ebf9bfa83314cf2707674b6fc0ce2d2985e1b4bbaed28b74dd7fdc2d5e6 476308 rplay_3.3.2.orig.tar.gz 9fb28e55a976419bf813718c0423deb75bfddf3f7ac6a96c73d38b88497c0766 40592 rplay_3.3.2-22.debian.tar.xz d76c70035ee8655f1f287e8afe252942577b45f130d3be2974787a2eea87dce5 9139 rplay_3.3.2-22_amd64.buildinfo Files: 268bb408efc230c2a92e1d9cba113003 2364 sound optional rplay_3.3.2-22.dsc 58052373adf8ad04ef3ce13e8ac0921a 476308 sound optional rplay_3.3.2.orig.tar.gz 4cd7ddebab02fe63660c92efd2a0ab6e 40592 sound optional rplay_3.3.2-22.debian.tar.xz 13b1aff181f933b845b4b7e5edd98f48 9139 sound optional rplay_3.3.2-22_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmkjPCFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR7o4D/4yadYVM98e0vdjoI0qiWrU0Mmvpfqg +HE8Alhwt1bqRvI1s/F1ljB1ASV8c14xD0b0rZAgBCa4E7EWTzqH2rYmW1sgdv3c aonEtg1UB8nO3Nv3A51QSzgo6k0v7rR3NEEUXWrGVOIBJIsmDARVSa2oj5wtpJdc mM3bvAM+R6LxhkJHFvwtGrDn9LPpg92NXWQcYcmXIabrkSEgcKK40GGYhCgq5bAP PMJmSu/RbOISAszDtjI7dwChVu3J4NhLCauI/9Wa6k/Ifzy4TQOB4qZ+mben95aF 5lMSqLB/4wAdYtdwFs+J6HGrmZ6o9TlUqt4MhlH8d2i/GWwnLjmQTzVTdMFqGF03 KhOxEIqIzIgeTpWbVyqtvMcgCnx7ypv8UbLfSYiuqsO60ty/fKa92/Pf0Pz2KqRM O2xcHlnNYbR9m7OzpYTQFPv3XQxyoBkuQxCXPXLFL19tXWBbXEqiRmjNc/1iCJJ5 TQZL8H604qvZuYTqLYgj7Ug+mqgL36bAD2cTtf6el1qgFAhSekORw+ZSo5UkppA/ IlxWpj2rUBlxD1Iz0aA8kAzY5OQRL5/ZRvRuMG2PnsnemelfD/DERnTJkKFB2xU4 2N/HILIvcdUBKdkPObsP8qXG+HDGo7tPb2dm4znfnYCfxZDAsY4FFUCIBtMqSErJ 4DpCXkyPRKblRA== =gcrh -----END PGP SIGNATURE-----
