-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 09 Apr 2009 20:43:35 +0200 Source: mpg123 Binary: mpg123 libmpg123-0 libmpg123-dev mpg123-oss-i486 mpg123-oss-3dnow mpg123-esd mpg123-nas mpg123-alsa Architecture: source amd64 Version: 1.7.2-1 Distribution: unstable Urgency: low Maintainer: Daniel Kobras <kobras@debian.org> Changed-By: Daniel Kobras <kobras@debian.org> Description: libmpg123-0 - MPEG layer 1/2/3 audio decoder -- runtime library libmpg123-dev - MPEG layer 1/2/3 audio decoder -- development files mpg123 - MPEG layer 1/2/3 audio player mpg123-alsa - MPEG layer 1/2/3 audio player with ALSA support - dummy package mpg123-esd - MPEG layer 1/2/3 audio player with Esound support - dummy package mpg123-nas - MPEG layer 1/2/3 audio player with NAS support - dummy package mpg123-oss-3dnow - MPEG layer 1/2/3 audio player for 3DNow! machines - dummy package mpg123-oss-i486 - MPEG layer 1/2/3 audio player for i486 machines - dummy package Changes: mpg123 (1.7.2-1) unstable; urgency=low . * New upstream version 1.7.2. + Fixes a denial-of-service vulnerability in the ID3 decoder. (No CVE-ID listed so far.) * debian/control: Package complies with version 3.8.1 of Debian policy. * debian/libmpg123-0.symbols: Add initial symbols file. * debian/rules: Make use of improved security features in gcc and ld, unless DEB_BUILD_OPTIONS contain the "noharden" keyword. Checksums-Sha1: 7b93490159fd52aae2c98024cadf32db5c75e15e 1222 mpg123_1.7.2-1.dsc 29a1aa8b014d1b0ca78335e128b45c725a2f8732 1378181 mpg123_1.7.2.orig.tar.gz ee229c2a5d97bad5dc589fd86da41b7b4bb9200c 16191 mpg123_1.7.2-1.diff.gz 1e56fccb964d90b30fdabe42943fa51d8dd5a08f 121486 libmpg123-0_1.7.2-1_amd64.deb 7980a02b591898a8be3169b655fd477a026e8068 160604 libmpg123-dev_1.7.2-1_amd64.deb b0f92809e45ede7d90f5f942d0403fcbfb621820 148810 mpg123_1.7.2-1_amd64.deb 08ef8da0bfb5075d069bc3ee2dd290c882cf7d9e 13116 mpg123-esd_1.7.2-1_amd64.deb 5a5845faa168fc3e39a27fae0943d561727ab0de 13106 mpg123-nas_1.7.2-1_amd64.deb 7827c5bf0f8bac603d58ef8070157eacb10c8b63 13102 mpg123-alsa_1.7.2-1_amd64.deb Checksums-Sha256: e7301e3c39baadb321e019bbeaeb13547b6df39544abac9a3be8a16e944ca306 1222 mpg123_1.7.2-1.dsc 10042940a9a9948bfcd0b94619f4e4e991cdb34bbb8edab88fb42d9ae6510e3d 1378181 mpg123_1.7.2.orig.tar.gz 518a94da8d8ced1bd6117390d352b8924636d9c878320b49e3e8d26a74806203 16191 mpg123_1.7.2-1.diff.gz bff42bf85873f01c0d33b7ccc697a43fa3531f4b2f3a91388d6243152b271e4c 121486 libmpg123-0_1.7.2-1_amd64.deb 60dbc2422f9107062da95dc12810844caabc356678ac06ecd0a42ed6ae78cbec 160604 libmpg123-dev_1.7.2-1_amd64.deb 8a4597bc92b744aad39fd952d9b9835c3afa95ad5c75b92fcad629d7a73f2498 148810 mpg123_1.7.2-1_amd64.deb 4c50204f7fdba9c588a04016e959a3f51edf7b187d4eec5d35edf1c5ed7334b2 13116 mpg123-esd_1.7.2-1_amd64.deb 34c07230e5d595b2be5e1451dad26aef0080aa83385ab105175f94287637eaa6 13106 mpg123-nas_1.7.2-1_amd64.deb 64894d575dd0085de473a16428bb62812324c27f692ee4aaacf08b0bd5802ecd 13102 mpg123-alsa_1.7.2-1_amd64.deb Files: fa1d72feeec6faa15a6ddedd8bd1ba0a 1222 sound optional mpg123_1.7.2-1.dsc 57e5d27dc1a43eaf912185ccfeaac20f 1378181 sound optional mpg123_1.7.2.orig.tar.gz da2005ba96fda715d9fc9291f7114686 16191 sound optional mpg123_1.7.2-1.diff.gz 4bc33d959e294e9159342890f80b8add 121486 libs optional libmpg123-0_1.7.2-1_amd64.deb 0e486ee5a6a3ad1eb10c43dacfa47cfb 160604 libdevel optional libmpg123-dev_1.7.2-1_amd64.deb e73ba525e19e42972dd935d0ef1b043f 148810 sound optional mpg123_1.7.2-1_amd64.deb d1c8b2c83a3788a9bd76d2cf56370e2f 13116 sound optional mpg123-esd_1.7.2-1_amd64.deb d25436532bd61384472ceca893666a01 13106 sound optional mpg123-nas_1.7.2-1_amd64.deb c0eb242a54bd739852292cccf3a50bd0 13102 sound optional mpg123-alsa_1.7.2-1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkneRmMACgkQpOKIA4m/fithPQCg0Hyj5/RFc7TmrODLkU51i6lx tiQAniw0QmxsNbtEvfGkBhSsngd4VlsP =8syY -----END PGP SIGNATURE----- Accepted: libmpg123-0_1.7.2-1_amd64.deb to pool/main/m/mpg123/libmpg123-0_1.7.2-1_amd64.deb libmpg123-dev_1.7.2-1_amd64.deb to pool/main/m/mpg123/libmpg123-dev_1.7.2-1_amd64.deb mpg123-alsa_1.7.2-1_amd64.deb to pool/main/m/mpg123/mpg123-alsa_1.7.2-1_amd64.deb mpg123-esd_1.7.2-1_amd64.deb to pool/main/m/mpg123/mpg123-esd_1.7.2-1_amd64.deb mpg123-nas_1.7.2-1_amd64.deb to pool/main/m/mpg123/mpg123-nas_1.7.2-1_amd64.deb mpg123_1.7.2-1.diff.gz to pool/main/m/mpg123/mpg123_1.7.2-1.diff.gz mpg123_1.7.2-1.dsc to pool/main/m/mpg123/mpg123_1.7.2-1.dsc mpg123_1.7.2-1_amd64.deb to pool/main/m/mpg123/mpg123_1.7.2-1_amd64.deb mpg123_1.7.2.orig.tar.gz to pool/main/m/mpg123/mpg123_1.7.2.orig.tar.gz