Accepted libtunepimp 0.4.2-3ubuntu2 (source)

[Martin Pitt]

Accepted:
 OK: libtunepimp_0.4.2-3ubuntu2.dsc
     -> Component: main Section: libs
 OK: libtunepimp_0.4.2-3ubuntu2.diff.gz

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Thu, 13 Jul 2006 10:52:41 +0200
Source: libtunepimp
Binary: libtunepimp3-dev python2.4-tunepimp libtunepimp3 libtunepimp-perl python-tunepimp libtunepimp-bin libtunepimp3-mp3
Architecture: source
Version: 0.4.2-3ubuntu2
Distribution: edgy
Urgency: low
Maintainer: Robert Jordens <jordens at debian.org>
Changed-By: Martin Pitt <martin.pitt at ubuntu.com>
Description: 
 libtunepimp-bin - libtunepimp simple tagging applications
 libtunepimp-perl - libtunepimp perl bindings
 libtunepimp3 - MusicBrainz tagging library and simple tagger application
 libtunepimp3-dev - MusicBrainz tagging library -- development files
 libtunepimp3-mp3 - MP3 Plugin for MusicBrainz tagging library
 python-tunepimp - libtunepimp python bindings (default package)
 python2.4-tunepimp - libtunepimp Python 2.4 bindings
Changes: 
 libtunepimp (0.4.2-3ubuntu2) edgy; urgency=low
 .
   * SECURITY UPDATE: Arbitrary code execution with crafted tags.
   * ./lib/lookuptools.cpp, LookupTRM::lookup(): Fix sizes of string variables
     and string reading into 'temp' variable to match buffer sizes.
   * References:
     http://bugs.musicbrainz.org/ticket/1764
Files: 
 a4f8af2d2c332768f52d3c277ba1e3ac 1016 libs optional libtunepimp_0.4.2-3ubuntu2.dsc
 80461f75f81b7a9db99c2336ad836a28 121536 libs optional libtunepimp_0.4.2-3ubuntu2.diff.gz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEtgq+DecnbV4Fd/IRArKEAKDwVFwozNaB+2FTPYzLgpIgAipNaQCeKWaA
SEGCKDIwfcbsmRv/1nkADps=
=NWz0
-----END PGP SIGNATURE-----