Mon Oct 6 22:55:58 BST 2008

vlc (0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2) hardy-security; urgency=low

  * SECURITY UPDATE: multiple denials of service and arbitrary code execution
    vulnerabilities. (LP: #262705)
    - debian/patches/040_CVE-2008-3732.diff: Fix TTA integer handling. Fixes
      arbitrary code execution. Patch from upstream git.
    - debian/patches/041_CVE-2008-3794.diff: Fix MMS integer handling. Fixes
      arbitrary code execution. Patch from upstream git.
    - References:
      + http://www.videolan.org/security/sa0807.html
      + CVE-2008-3732
      + CVE-2008-3794

Date: Sun, 21 Sep 2008 14:00:25 +1000
Changed-By: William Grant <wgrant at ubuntu.com>
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/vlc/0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2
-------------- next part --------------
Format: 1.7
Date: Sun, 21 Sep 2008 14:00:25 +1000
Source: vlc
Binary: libvlc0 libvlc0-dev mozilla-plugin-vlc vlc vlc-nox vlc-plugin-alsa vlc-plugin-arts vlc-plugin-esd vlc-plugin-ggi vlc-plugin-glide vlc-plugin-pulse vlc-plugin-sdl vlc-plugin-svgalib wxvlc
Architecture: amd64_translations amd64 hppa_translations hppa all i386_translations i386 ia64_translations ia64 lpia_translations lpia powerpc_translations powerpc source sparc_translations sparc
Version: 0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu MOTU Developers <ubuntu-motu at lists.ubuntu.com>
Changed-By: William Grant <wgrant at ubuntu.com>
Description:
 libvlc0    - multimedia player and streamer library
 libvlc0-dev - development files for VLC
 mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC
 vlc        - multimedia player and streamer
 vlc-nox    - multimedia player and streamer (without X support)
 vlc-plugin-alsa - dummy transitional package
 vlc-plugin-arts - aRts audio output plugin for VLC
 vlc-plugin-esd - Esound audio output plugin for VLC
 vlc-plugin-ggi - GGI video output plugin for VLC
 vlc-plugin-glide - Glide video output plugin for VLC
 vlc-plugin-pulse - Pulseaudio audio output plugin for VLC
 vlc-plugin-sdl - SDL video and audio output plugin for VLC
 vlc-plugin-svgalib - SVGAlib video output plugin for VLC
 wxvlc      - dummy transitional package
Changes:
 vlc (0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2) hardy-security; urgency=low
 .
   * SECURITY UPDATE: multiple denials of service and arbitrary code execution
     vulnerabilities. (LP: #262705)
     - debian/patches/040_CVE-2008-3732.diff: Fix TTA integer handling. Fixes
       arbitrary code execution. Patch from upstream git.
     - debian/patches/041_CVE-2008-3794.diff: Fix MMS integer handling. Fixes
       arbitrary code execution. Patch from upstream git.
     - References:
       + http://www.videolan.org/security/sa0807.html
       + CVE-2008-3732
       + CVE-2008-3794
Files:
 e577b14a5ab884c8fbe9fd2c496d23ea 5031886 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64_translations.tar.gz
 98887ded8e31f860f6fd9ef19b93aa1e 1169264 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 42578f32117b88f8841b92a28071020f 4763264 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 bedae0cf6143dd5a9872f99943b8fba6 830490 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 e6e28ee0e6b328d060b1cdc175990ef6 20288 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 85aae227cac21e9c66379d8a8a851a66 4614 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 50489f258a2ce9442841de2d0e7068c4 7028 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 092f9ee270601f4cb93696912cdad29d 11772 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 26853a5c4eae3ba31600dc73b47ba790 6386 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 8c26e5ca24bb7bdd736c6caede63471e 4308 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 83724525cc765952d8a50ac0e9f0653e 38558 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_amd64.deb
 b5296bda7ff912760877edc6a959bb52 5031894 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa_translations.tar.gz
 2e73ad9f8e193a082b6d37c75ce4c2b4 1393094 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 88a75b15dd70f92056eb1776e16d12b8 5258548 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 557d18d6ab234d7d859b9692a7de7872 945704 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 5a79587ef26ba6b370efb6d746d5a1f9 20244 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 6042261a5f234e24e902d3fb1c529eb7 7002 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 e412f8c7c6fad1964b7a022d26586a8a 8526 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 8bdb1c2c17ba5e9a56a1bc39b8ed05d2 13904 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 794e08c087d75de6b4138bf5a16a8dd7 7780 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 77dec2a79f1ff6def84eb8cb1573dc2f 5354 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 aa5d6db9e8c2923acbe43a9277ebe4bc 42848 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_hppa.deb
 a8f6e2591ea543dd17c8620f439cfd10 840 graphics optional vlc-plugin-alsa_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_all.deb
 7ab4ab88e13bbe6e0ceac24531ca42a7 836 graphics optional wxvlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_all.deb
 4e4e8944c1f36328ea22ce8ceeeb87a7 5031829 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386_translations.tar.gz
 17e238a30accf0eec0be9211d87d42ab 1140004 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 557ae03f8608a54091fadd0659845335 4747294 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 8985d6a484c0378f8e8eacd2c1226d52 826516 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 6426cf79760ce8a82b7ee4486f12b016 20280 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 3d20b5bcadd28ff90c343b6c50ac5cd3 4878 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 6d5934d9b4cbade87a25007de6a8059f 6954 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 7c84414ecf06c7c9acec0bbb4a304dac 10976 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 6a33bbc7eae193fcd49136b3fe1b8e50 6088 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 2f6ed7e49d6860c2f255b5e4ba483ba7 4256 graphics optional vlc-plugin-glide_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 7733ffadc93de2a8566dc20401c26d04 4136 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 19dea1af5296a8157046792565d035ad 37946 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 d58840df4442b264a0c7010cab445d3f 4598 graphics optional vlc-plugin-svgalib_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_i386.deb
 6f998bb1115ebc952f958b0d74aed01a 5031897 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64_translations.tar.gz
 50615c8ad630d4c10628794d6dc72891 1614134 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 8885382825ce84c0049db396da83b4fa 5974038 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 ea0db2eb41fcc80183a4fb121634227d 1286334 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 6aba2b73246d0dfdf9305776e0614e4a 20240 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 2c327a81cd1538b3281b8a241660f2da 6230 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 4b52891e7b673b0a20ad3c0262673494 9376 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 1949a481a9f180fb492bc473d01bfe90 18248 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 0beb6e1f866d27ee3e53197f112dc61d 9320 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 32432b75103116fdaa86a2636e483663 5492 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 c5017560b0df6ab1df44b3987a707618 49064 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_ia64.deb
 66f0c058183118a628a75f4f8dab1903 5031891 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia_translations.tar.gz
 f739d249498fd0b9a841f24617c5b55f 1138620 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 98835e19445235e52f1bbdb680d572d6 4748654 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 fb94970026ec01bb07b191cda29174b0 843272 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 d600522459509ab8354d289977543cd0 20280 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 10b0236add897fa9ef91e3a5735d15fc 4904 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 077c93e342b43550c515067114650f8c 6962 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 abba33826272a197c133127001c96eec 10986 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 1339f307ff026c689bef1b29c66f916b 6094 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 11107bc8a3666a5d3efa90e7a2811c95 4126 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 d8c7783a275170205d6de903188ac82a 38034 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_lpia.deb
 f7f9ee754b660742c962ba8670774e2e 5031861 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc_translations.tar.gz
 61b642c8fc0b91b836900b53c3d93425 1237242 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 3ecfb1e82f1743284e8d781baa83203e 5300552 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 0c52d5d3b921614423c9f44d6952d6f5 893322 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 0e8934ea7ca0f43062d7bf63cb94d598 20286 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 1bf58b60bf6182314f8e3a08b21609d6 7680 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 d7fb93862f6dc8bf9626d058b45025ac 9220 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 08835eb13d2a900527123f15e755e35b 15248 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 1539894b003cc1f566839bd090e5aa2b 8996 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 9bd8a473fa75fd7be6a2041ae5069d69 6394 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 8d63a2e9966894378e5b57b016b2688e 41232 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_powerpc.deb
 54fa5ba901f63f8a9af143b840dd44d4 2353 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2.dsc
 a0247bd92409c22e726f61d4c07d3018 49294 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2.diff.gz
 4d2683289746d6917b71d93f923396da 5031888 raw-translations - vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc_translations.tar.gz
 d9e1f686683b39d8d85a795389607a9d 1186540 graphics optional vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 887d6e82b925f360301f0a97c2fd605a 4757646 net optional vlc-nox_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 18ac942bb1d9206a7b2ae13dafe613e0 813194 libs optional libvlc0_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 f262a9a3cbcfd0a83df668e55022805a 20238 libdevel optional libvlc0-dev_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 c0a6df8450463efdd0ad4837dba9a2ab 4854 graphics optional vlc-plugin-esd_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 56772b6e37f810027783bf80b21f8e75 6476 graphics optional vlc-plugin-pulse_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 87ea7691b1d41c94da2ce4cb3ac1e3c3 10366 graphics optional vlc-plugin-sdl_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 43b86ed0f51f269ff40ffd5acea4c3b0 5948 graphics optional vlc-plugin-ggi_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 89e3e408e9c9f622188024d5f01f7969 4030 graphics optional vlc-plugin-arts_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
 b552a7e19d1d4620f744b283bc74c8d1 34302 graphics optional mozilla-plugin-vlc_0.8.6.release.e+x264svn20071224+faad2.6.1-0ubuntu3.2_sparc.deb
Launchpad-Bugs-Fixed: 262705
Original-Maintainer: Sam Hocevar (Debian packages) <sam+deb at zoy.org>