Accepted: vlc 0.8.6.release.d-0ubuntu4 (source)

[Emanuele Gentili]

Accepted:
 OK: vlc_0.8.6.release.d.orig.tar.gz
 OK: vlc_0.8.6.release.d-0ubuntu4.diff.gz
 OK: vlc_0.8.6.release.d-0ubuntu4.dsc
     -> Component: universe Section: graphics

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 27 Feb 2008 00:33:06 +0100
Source: vlc
Binary: vlc vlc-nox libvlc0 libvlc0-dev vlc-plugin-esd vlc-plugin-alsa vlc-plugin-sdl vlc-plugin-ggi vlc-plugin-glide vlc-plugin-arts mozilla-plugin-vlc vlc-plugin-svgalib wxvlc
Architecture: source
Version: 0.8.6.release.d-0ubuntu4
Distribution: hardy
Urgency: low
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
Changed-By: Emanuele Gentili <emgent at emanuele-gentili.com>
Description: 
 libvlc0    - multimedia player and streamer library
 libvlc0-dev - development files for VLC
 mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC
 vlc        - multimedia player and streamer
 vlc-nox    - multimedia player and streamer (without X support)
 vlc-plugin-alsa - dummy transitional package
 vlc-plugin-arts - aRts audio output plugin for VLC
 vlc-plugin-esd - Esound audio output plugin for VLC
 vlc-plugin-ggi - GGI video output plugin for VLC
 vlc-plugin-glide - Glide video output plugin for VLC
 vlc-plugin-sdl - SDL video and audio output plugin for VLC
 vlc-plugin-svgalib - SVGAlib video output plugin for VLC
 wxvlc      - dummy transitional package
Launchpad-Bugs-Fixed: 194907 195949
Changes: 
 vlc (0.8.6.release.d-0ubuntu4) hardy; urgency=low
 .
   [ Emanuele Gentili ]
   * SECURITY UPDATE:
     - debian/patches/021_CVE-2008-0984.diff (LP: #195949)
      + VLC media player's MPEG-4 file format parser (a.k.a. the MP4 demuxer) suffers
        from an arbitrary memory overwrite vulnerability when using crash the player
        instance.
 .
   * References
     - http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0984
     - http://www.videolan.org/security/sa0802.html
 .
   [ Mario Limonciello ]
   * debian/control:
     - Build debian on libxul-dev instead of firefox-dev
   * debian/rules:
     - Use xulrunner-config rather than firefox-config (LP: #194907)
Files: 
 19eb15c499090e13aa8d2978f379d34c 2169 graphics optional vlc_0.8.6.release.d-0ubuntu4.dsc
 cb52d4147401ea7ebb673719a4d90856 186539 graphics optional vlc_0.8.6.release.d-0ubuntu4.diff.gz
Original-Maintainer: Sam Hocevar (Debian packages) <sam+deb at zoy.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHxXTQTIvEyIDfbVgRAhm2AKCT+uqCds8ERBcI5kXCnP24MFq4pQCfR/hu
mqiVdG7gPrjSoIgyPz28HNw=
=XUFZ
-----END PGP SIGNATURE-----