Wed Aug 6 19:56:23 BST 2008

Accepted:
 OK: xine-lib_1.1.7.orig.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3.diff.gz
 OK: xine-lib_1.1.7-1ubuntu1.3.dsc
     -> Component: main Section: libs
 OK: libxine1_1.1.7-1ubuntu1.3_amd64.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_amd64.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_amd64.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_amd64.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_amd64.deb
 OK: libxine1_1.1.7-1ubuntu1.3_hppa.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_hppa.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_hppa.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_hppa.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_hppa.deb
 OK: libxine-dev_1.1.7-1ubuntu1.3_all.deb
 OK: libxine1_1.1.7-1ubuntu1.3_i386.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_i386.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_i386.deb
 OK: libxine1-doc_1.1.7-1ubuntu1.3_all.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_i386.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_i386.deb
 OK: libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
 OK: libxine1_1.1.7-1ubuntu1.3_ia64.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_ia64.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_ia64.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_ia64.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_ia64.deb
 OK: libxine1_1.1.7-1ubuntu1.3_lpia.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_lpia.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_lpia.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_lpia.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_lpia.deb
 OK: libxine1_1.1.7-1ubuntu1.3_powerpc.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_powerpc.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_powerpc.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_powerpc.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_powerpc.deb
 OK: libxine1_1.1.7-1ubuntu1.3_sparc.deb
 OK: libxine1-console_1.1.7-1ubuntu1.3_sparc.deb
 OK: libxine1-dbg_1.1.7-1ubuntu1.3_sparc.deb
 OK: libxine1-ffmpeg_1.1.7-1ubuntu1.3_sparc.deb
 OK: libxine1-gnome_1.1.7-1ubuntu1.3_sparc.deb
 OK: xine-lib_1.1.7-1ubuntu1.3_amd64_translations.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3_hppa_translations.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3_i386_translations.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3_ia64_translations.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3_lpia_translations.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3_powerpc_translations.tar.gz
 OK: xine-lib_1.1.7-1ubuntu1.3_sparc_translations.tar.gz

Format: 1.7
Date: Wed, 30 Jul 2008 15:57:21 -0400
Source: xine-lib
Binary: libxine-dev libxine1 libxine1-console libxine1-dbg libxine1-doc libxine1-ffmpeg libxine1-gnome libxine1-plugins
Architecture: amd64_translations amd64 hppa_translations hppa i386_translations i386 all ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc source sparc_translations sparc
Version: 1.1.7-1ubuntu1.3
Distribution: gutsy-security
Urgency: low
Maintainer: Reinhard Tartler <siretart at tauware.de>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
 libxine1   - the xine video/media player library, binary files
 libxine1-console - libaa/libcaca/directfb related plugins for libxine1
 libxine1-dbg - debug symbols for libxine1
 libxine1-ffmpeg - mpeg related plugins for libxine1
 libxine1-gnome - GNOME-related plugins for libxine1
 libxine-dev - the xine video player library, development packages
 libxine1-doc - the xine video player library, development packages
 libxine1-plugins - the xine video/media player library, meta package
Changes:
 xine-lib (1.1.7-1ubuntu1.3) gutsy-security; urgency=low
 .
   * SECURITY UPDATE: array index vulnerability
   * fix for src/libxineadec/xine_speex_decoder.c to properly validate its
     input
   * SECURITY UPDATE: buffer overflow in the NSF demuxer
   * fix for src/demuxers/demux_nsf.c to use strndup() instead of strdup()
   * SECURITY UPDATE: integer overflows in FLV, Qt, Real, WC3Movie, Matroska
     and FILM demuxers
   * fix demux_film.c, demux_flv.c, demux_qt.c, demux_real.c, demux_wc3movie.c
     and ebml.c to check for failure of various memory allocations
   * SECURITY UPDATE: array index vulnerability
   * fix src/input/libreal/sdpplin.c and src/input/libreal/sdpplin.h to verify
     size of stream_id and stream_count
   * SECURITY UPDATE: buffer overflow in the RTSP header-handling code
   * fix src/input/libreal/rmff.c and src/input/libreal/rmff.h to check buffer
     sizes in rmff_dump_*() functions (CVE-2008-0225 and CVE-2008-0238)
   * SECURITY UPDATE: buffer overflow in FLAC processing
   * fix for src/demuxers/demux_flac.c to check buffer lengths and leave room
     for NUL termination
   * SECURITY UPDATE: fix buffer overflow in ASF demuxer as demonstrated by
     exploit code for CVE-2006-1664
   * fix src/demuxers/demux_asf.c to check the size of asf_header_len
   * SECURITY UPDATE: buffer over in Matroska demuxer
   * fix src/demuxers/demux_matroska.c to use unsigned ints and check size of
     first_frame_size and frame_size, and return value of parse_ebml_sint() and
     parse_ebml_uint()
   * References
     CVE-2008-1686
     CVE-2008-1878
     CVE-2008-1482
     CVE-2008-0073
     CVE-2008-0225
     CVE-2008-0238
     CVE-2008-0486
     CVE-2008-1110
     CVE-2008-1161
Files:
 71ef6a30e3c254b4b2fc87b942a79cd7 475050 raw-translations - xine-lib_1.1.7-1ubuntu1.3_amd64_translations.tar.gz
 86b07e8bf31ec1cafe9c40e27e993084 2382002 libs optional libxine1_1.1.7-1ubuntu1.3_amd64.deb
 bf87a04d32dbe428beab47af85bd7380 3139966 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_amd64.deb
 7cce13fee53be6dcb3e20a7b8d144cb6 445200 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_amd64.deb
 7cb8fe644e5919dd8a1e567d95429237 59296 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_amd64.deb
 1fd31997b0a930bf18cd98084b3bafce 78426 libs extra libxine1-console_1.1.7-1ubuntu1.3_amd64.deb
 85b26b4293284df20e042b23737ef70b 475045 raw-translations - xine-lib_1.1.7-1ubuntu1.3_hppa_translations.tar.gz
 484fa20343f78a5e3d90eb1ba325eac4 2504648 libs optional libxine1_1.1.7-1ubuntu1.3_hppa.deb
 43041d7938282d83d067f369a0023b71 2342684 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_hppa.deb
 8349a7c725f8726ab3b73c071926f5a2 436530 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_hppa.deb
 71f7a6917bb06821a066e5cd1154d217 63296 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_hppa.deb
 2ee3382b22a02b234c08fd4f91c9606d 77182 libs extra libxine1-console_1.1.7-1ubuntu1.3_hppa.deb
 d114061f1b5d852c0cc87544777688be 320886 libdevel optional libxine-dev_1.1.7-1ubuntu1.3_all.deb
 8c5035155b647ce7e670c10d9e6f90e3 125992 libdevel optional libxine1-doc_1.1.7-1ubuntu1.3_all.deb
 67724629576a3e71c06b4c70abdc4905 44762 libs extra libxine1-plugins_1.1.7-1ubuntu1.3_all.deb
 05ed9f7260327ea4dcee1b533fb11f6c 475066 raw-translations - xine-lib_1.1.7-1ubuntu1.3_i386_translations.tar.gz
 a02077abd97985a4a1ec76f4f1cb7232 2490502 libs optional libxine1_1.1.7-1ubuntu1.3_i386.deb
 7dfe3085034a5df0b84d39d527066257 3269686 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_i386.deb
 26856c3a255125cba5eb850dcbe6b70d 446502 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_i386.deb
 41b73db30c0497f4b524116b03c137e6 58806 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_i386.deb
 12cb1b67ff7f707bea1f221d78be2fb4 79342 libs extra libxine1-console_1.1.7-1ubuntu1.3_i386.deb
 74efe1dc04b3ae63e39e4e849a0d6c25 475069 raw-translations - xine-lib_1.1.7-1ubuntu1.3_ia64_translations.tar.gz
 8f354bf2a91a3b39d425171679e871d8 3012950 libs optional libxine1_1.1.7-1ubuntu1.3_ia64.deb
 a1beca27d91aedb7ff177e09563b3506 2262294 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_ia64.deb
 5b960de21a0744239bc8f456ba8fd50b 538952 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_ia64.deb
 da7a266f07b646a50ecee61147405223 66584 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_ia64.deb
 4dbbfbe72194169d9cdc593b6597fd2e 89792 libs extra libxine1-console_1.1.7-1ubuntu1.3_ia64.deb
 c99a12f536abdb2e735205b7435619b6 2363212 libs optional libxine1_1.1.7-1ubuntu1.3_lpia.deb
 695737a2966665238ec050eb87ec1cbc 736163 raw-translations - xine-lib_1.1.7-1ubuntu1.3_lpia_translations.tar.gz
 4e5bfc35c67103a98132643fdcb53bca 3049478 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_lpia.deb
 4ecb5410df0c524dd288f60ae3478985 444696 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_lpia.deb
 c06871fcadba77a3bececcddc57e178b 58674 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_lpia.deb
 42bb7f916d7cb1ea6e4dad65aecd79a1 78420 libs extra libxine1-console_1.1.7-1ubuntu1.3_lpia.deb
 1fc32917e19c4df257c1643e6f944f3a 475050 raw-translations - xine-lib_1.1.7-1ubuntu1.3_powerpc_translations.tar.gz
 ca3ce19217abfbf521d706b6b7970155 2583712 libs optional libxine1_1.1.7-1ubuntu1.3_powerpc.deb
 f87ab41b6445057e4a6ee7c562c23a7a 3186752 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_powerpc.deb
 2d6e95998d82fa719a378784e5eac821 477848 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_powerpc.deb
 4fbf4cfa6bb9ad2821ca05e66f94cd30 65296 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_powerpc.deb
 1c9bd779b40a88b2746379fa087b0142 83148 libs extra libxine1-console_1.1.7-1ubuntu1.3_powerpc.deb
 06af830d473dd8e4b04e6b9ee784b9e6 1607 libs optional xine-lib_1.1.7-1ubuntu1.3.dsc
 435a101ffb894716eecd071f5939dbaf 27784 libs optional xine-lib_1.1.7-1ubuntu1.3.diff.gz
 ee269a9a10f55a3b9333dec4c58fbac3 475067 raw-translations - xine-lib_1.1.7-1ubuntu1.3_sparc_translations.tar.gz
 f3db946bc67f6847746ba50a96da39ce 2351408 libs optional libxine1_1.1.7-1ubuntu1.3_sparc.deb
 a9b393ba169ca85c2ab788dcee36909d 2858646 libs extra libxine1-dbg_1.1.7-1ubuntu1.3_sparc.deb
 0f56c6e1658b0042f0c27da93d21a583 453450 libs optional libxine1-ffmpeg_1.1.7-1ubuntu1.3_sparc.deb
 18c9981211d5660402bcfef86d949b7c 58868 libs optional libxine1-gnome_1.1.7-1ubuntu1.3_sparc.deb
 748da95afa87e6f9d74a2efdf6fde9a3 74320 libs extra libxine1-console_1.1.7-1ubuntu1.3_sparc.deb