Accepted: xine-lib 1.1.14-2ubuntu1 (source)

[Kees Cook]

Accepted:
 OK: xine-lib_1.1.14.orig.tar.gz
 OK: xine-lib_1.1.14-2ubuntu1.diff.gz
 OK: xine-lib_1.1.14-2ubuntu1.dsc
     -> Component: main Section: libs

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 20 Aug 2008 12:36:21 -0700
Source: xine-lib
Binary: libxine1-doc libxine1 libxine1-bin libxine-dev libxine1-ffmpeg libxine1-gnome libxine1-console libxine1-x libxine1-misc-plugins libxine1-dbg libxine1-plugins libxine1-all-plugins
Architecture: source
Version: 1.1.14-2ubuntu1
Distribution: intrepid
Urgency: high
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 libxine-dev - the xine video player library, development packages
 libxine1   - the xine video/media player library, meta-package
 libxine1-all-plugins - the xine video/media player library, meta package
 libxine1-bin - the xine video/media player library, binary files
 libxine1-console - libaa/libcaca/framebuffer/directfb related plugins for libxine1
 libxine1-dbg - debug symbols for libxine1
 libxine1-doc - the xine video player library, documentation files
 libxine1-ffmpeg - MPEG-related plugins for libxine1
 libxine1-gnome - GNOME-related plugins for libxine1
 libxine1-misc-plugins - Input, audio output and post plugins for libxine1
 libxine1-plugins - the xine video/media player library, meta package
 libxine1-x - X desktop video output plugins for libxine1
Closes: 491671 492870
Changes: 
 xine-lib (1.1.14-2ubuntu1) intrepid; urgency=low
 .
   * Merge from debian unstable, remaining changes:
     - disable the jack plugin to make dapper->hardy upgrades work (LP #203605)
     - adjust deps to make sure Kubuntu CDs are installable.
 .
 xine-lib (1.1.14-2) unstable; urgency=high
 .
   * Fixes from upstream hg:
     - CVE-2008-3231: denial of service (application crash) via a crafted OGG
       file. (Closes: #492870)
     - DoS (application crashes) via crafted Windows Media & AVI files.
     - Fix crashes with some MP3 files on i386. (Closes: #491671)
     - Avoid Xv deinterlacer image corruption on some chipsets.
     - V4L buffer overflow & cleanup crash fixes.
     - V4L CVBS & S-Video input fix.
   * Fix a DoS (application crash) via crafted AAC files. This uses external
     libfaad and, consequently, adds a build-dependency on libfaad-dev.
   * Use standards version 3.8.0.
   * Adjust libcdio-dev build-dep versioning (lintian warning).
Checksums-Sha1: 
 2af8e714eb95bfce003681def9a4e70630b9a1a8 2356 xine-lib_1.1.14-2ubuntu1.dsc
 2d65576cf0248405672411184b1e98d7783e908c 34430 xine-lib_1.1.14-2ubuntu1.diff.gz
Checksums-Sha256: 
 415246c74cc2554d1f5f756cdf7c52efc88774fa11cb09f0327188da4e64e6b2 2356 xine-lib_1.1.14-2ubuntu1.dsc
 f495ee679dcab982e197d88bfc66d156c242a0edfcbced11105fd9274380accb 34430 xine-lib_1.1.14-2ubuntu1.diff.gz
Files: 
 f9ff1d6b480df011c188aab0e8ab2283 2356 libs optional xine-lib_1.1.14-2ubuntu1.dsc
 3d7698a624fefdd95320418c08cfbb3d 34430 libs optional xine-lib_1.1.14-2ubuntu1.diff.gz
Original-Maintainer: Reinhard Tartler <siretart at tauware.de>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Kees Cook <kees at outflux.net>

iEYEARECAAYFAkisdekACgkQH/9LqRcGPm0oqwCaA29aFv4V444UpT1pSuKH5JPM
6UcAoIkqrEB4hHUze2JZcxJ8lhmD/IbF
=iO4x
-----END PGP SIGNATURE-----