Accepted mpg123 0.59r-19 (source)
Ubuntu Archive Auto-Sync
katie at jackass.ubuntu.com
Fri Feb 4 13:45:29 CST 2005
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Origin: Debian/unstable
Format: 1.7
Date: Fri, 04 Feb 2005 19:17:05 +0000
Source: mpg123
Binary: mpg123-esd, mpg123, mpg123-nas, mpg123-oss-3dnow, mpg123-oss-i486
Architecture: source
Version: 0.59r-19
Distribution: hoary
Urgency: high
Maintainer: Daniel Kobras <kobras at debian.org>
Changed-By: Ubuntu Archive Auto-Sync <katie at jackass.ubuntu.com>
Description:
mpg123 - MPEG layer 1/2/3 audio player
Closes: 60058 185544 277948 287043
Changes:
mpg123 (0.59r-19) unstable; urgency=high
.
* layer2.c: Fix off-by-one error in boundary check introduced in -18.
Thanks to Jeremy Huddleston for noticing.
* layer1.c: Use proper parameter range in stereo test.
.
mpg123 (0.59r-18) unstable; urgency=high
.
* common.c, layer2.c: Fix insufficient validation of MPEG header
values, discovered by Yuri D'Elia (CAN-2004-0991).
* mpg123.c: Fix buffer overflow in playlist parser, discovered by
Bartlomiej Sieka (CAN-2004-1284). Thanks to Steve Kemp for the
patch. Closes: #287043
* httpget.c: Fix further heap overflows in http parser. Backported
from the Gentoo patch for CAN-2004-0982. Original path was coded
by Jeremy Huddleston for version pre0.59s.
* mpg123.c: Fix NULL pointer dereference if http_open() fails.
* httpget.c, xfermem.c: Do not explicitly declare errno variable.
* audio.c: Include stdlib.h to silence compiler warning.
.
mpg123 (0.59r-17) unstable; urgency=high
.
* httpget.c: Fix heap overflow in http authentication handler
(CAN-2004-0982). Closes: #277948
* mpg123.c: Apply patch by Dan Olson to fix handling of remote
playlists. Closes: #60058, #185544
Files:
36efdf7a61b9545e696e77f8353a8dd2 739 non-free/sound optional mpg123_0.59r-19.dsc
6e1a84a7c13e86d446b67021cb71e71a 41003 non-free/sound optional mpg123_0.59r-19.diff.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iQEVAwUBQgPKMQF4adwMEr3XAQIu9AgAtbjJOjrqlGHQCIZOpKBUJbAh9vxt96BA
dHaIKumtADtaRiLlAGgC8VkDzG/Kln0XqYhH+gBAEEOF8ZD5fn3UNND+2Ab3nC3z
Cir02BJYR6XnTKax6hmujRYux1rOTmUI6zW31b0zUfOI1BeTVKYxtoB0kg8coZLl
CECBW9LDigp9s3sBHRtqhugSPb5x3UxxFuucZDxF/kiJqO83sptm5L0klhdHaq2F
aBwigYvLysMT8nBvug5BhUYIJmGw1nZOJvpmOwV6re7lgPX8d7iIarUA+p4XqG+Y
bfYFuOzL++QErAnYopEhEmf+qwurF1Yt7yLciE10/EtiCM9k8GXHQg==
=ojVi
-----END PGP SIGNATURE-----
Accepted:
mpg123_0.59r-19.diff.gz
to pool/multiverse/m/mpg123/mpg123_0.59r-19.diff.gz
mpg123_0.59r-19.dsc
to pool/multiverse/m/mpg123/mpg123_0.59r-19.dsc
More information about the hoary-changes
mailing list