Accepted: xine-lib 1.1.14-3ubuntu1 (source)

[Reinhard Tartler]

Accepted:
 OK: xine-lib_1.1.14.orig.tar.gz
 OK: xine-lib_1.1.14-3ubuntu1.diff.gz
 OK: xine-lib_1.1.14-3ubuntu1.dsc
     -> Component: main Section: libs

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 25 Aug 2008 13:02:33 +0200
Source: xine-lib
Binary: libxine1-doc libxine1 libxine1-bin libxine-dev libxine1-ffmpeg libxine1-gnome libxine1-console libxine1-x libxine1-misc-plugins libxine1-dbg libxine1-plugins libxine1-all-plugins
Architecture: source
Version: 1.1.14-3ubuntu1
Distribution: intrepid
Urgency: high
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Reinhard Tartler <siretart at tauware.de>
Description: 
 libxine-dev - the xine video player library, development packages
 libxine1   - the xine video/media player library, meta-package
 libxine1-all-plugins - the xine video/media player library, meta package
 libxine1-bin - the xine video/media player library, binary files
 libxine1-console - libaa/libcaca/framebuffer/directfb related plugins for libxine1
 libxine1-dbg - debug symbols for libxine1
 libxine1-doc - the xine video player library, documentation files
 libxine1-ffmpeg - MPEG-related plugins for libxine1
 libxine1-gnome - GNOME-related plugins for libxine1
 libxine1-misc-plugins - Input, audio output and post plugins for libxine1
 libxine1-plugins - the xine video/media player library, meta package
 libxine1-x - X desktop video output plugins for libxine1
Closes: 491671 492870
Changes: 
 xine-lib (1.1.14-3ubuntu1) intrepid; urgency=low
 .
   * merge from debian unstable. Remaining changes:
     - disable the jack plugin
     - Modify Maintainer value to match the DebianMaintainerField
       specification.
   * update XS-Vcs-Url to public branch location.
 .
 xine-lib (1.1.14-3) unstable; urgency=high
 .
   * More security fixes from upstream hg:
     - Fix an exploitable ID3 heap buffer overflow.
     - Check for possible buffer overflow attempts in the Real demuxer.
     - Use size_t for data length variables where there may be int overflows.
     - Add some checks for memory allocation failures.
 .
 xine-lib (1.1.14-2) unstable; urgency=high
 .
   * Fixes from upstream hg:
     - CVE-2008-3231: denial of service (application crash) via a crafted OGG
       file. (Closes: #492870)
     - DoS (application crashes) via crafted Windows Media & AVI files.
     - Fix crashes with some MP3 files on i386. (Closes: #491671)
     - Avoid Xv deinterlacer image corruption on some chipsets.
     - V4L buffer overflow & cleanup crash fixes.
     - V4L CVBS & S-Video input fix.
   * Fix a DoS (application crash) via crafted AAC files. This uses external
     libfaad and, consequently, adds a build-dependency on libfaad-dev.
   * Use standards version 3.8.0.
   * Adjust libcdio-dev build-dep versioning (lintian warning).
Checksums-Sha1: 
 915817260f6473281e239efbd3d3d753402316c8 2357 xine-lib_1.1.14-3ubuntu1.dsc
 876d4105aafbac3bb1e939b8dc29b79afdf48815 36959 xine-lib_1.1.14-3ubuntu1.diff.gz
Checksums-Sha256: 
 744a7a6e57076404f520c1bc14a50614a53ebf1ed5c6bc20b8da88e9c573db4e 2357 xine-lib_1.1.14-3ubuntu1.dsc
 9e8e103a86e53dc5ed5d785fe5967c3a2efa8e907e65b0e48b7aae8afabb2b83 36959 xine-lib_1.1.14-3ubuntu1.diff.gz
Files: 
 c30f032af23c9a05992f7b0c331c624d 2357 libs optional xine-lib_1.1.14-3ubuntu1.dsc
 7721181759279b256f5455d743c98ea2 36959 libs optional xine-lib_1.1.14-3ubuntu1.diff.gz
Original-Maintainer: Reinhard Tartler <siretart at tauware.de>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Debian Powered!

iEYEARECAAYFAkiysM8ACgkQmAg1RJRTSKTyRwCfcFLTxlb15tVYE8u68IR6NlIr
AOEAnj68c/hR9SjtudxXy+MhHoxStega
=a5In
-----END PGP SIGNATURE-----