[ubuntu/xenial-proposed] vorbis-tools 1.4.0-7ubuntu1 (Accepted)

[Iain Lane]

vorbis-tools (1.4.0-7ubuntu1) xenial; urgency=low

  * Merge with Debian, remaining changes:
    - build --without-kate; avoid MIR for kate/liboggz

vorbis-tools (1.4.0-7) unstable; urgency=low

  [ Martin Steghöfer ]
  * Format patches for gbp-pq, correct tagging and add missing
    information to tagging.
  * Add sampling rate sanity check to avoid crash (in case of unpatched
    libvorbis version) or to improve error message (with patched libvorbis).
  * Fix vorbistagedit: Reading of file list from stdin was broken.
    (Closes: #771448)
  * Documentation of vorbistagedit: Improve wording of error message.
  * Fix bashism in /usr/bin/vorbistagedit (negative status code).
    (Closes: #772391)
  * Truncate long status lines on small terminals (Closes: #239073)
  * Fix ogg123 speex stereo playback: Initialize stereo information
    data structure (Closes: #312185)
  * Fix ogg123 speex playback: Initialize channel matrix (Closes: #772766)
  * Add low-priority mailcap entry for "ogginfo" on action "cat".
    (Closes: #728062)
  * Fix oggdec crash/hang: Don't ignore stream errors (Closes: #772978)
  * Use translations in oggdec (Closes: #772976)

  [ Petter Reinholdtsen ]
  * Add debian/gbp.conf to enforce the user of pristine-tar.
  * oggenc: Fix large alloca on bad AIFF input to oggenc
    (CVE-2015-6749). (Closes: #797461)
  * oggenc: Validate count of channels in the header
    (CVE-2014-9638, CVE-2014-9639). (Closes: #776086)

Date: Tue, 24 Nov 2015 12:59:54 +0000
Changed-By: Iain Lane <iain at orangesquash.org.uk>
Maintainer: pkg-xiph-maint at lists.alioth.debian.org (Debian Xiph.org Maintainers)
https://launchpad.net/ubuntu/+source/vorbis-tools/1.4.0-7ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 24 Nov 2015 12:59:54 +0000
Source: vorbis-tools
Binary: vorbis-tools vorbis-tools-dbg
Architecture: source
Version: 1.4.0-7ubuntu1
Distribution: xenial
Urgency: low
Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint at lists.alioth.debian.org>
Changed-By: Iain Lane <iain at orangesquash.org.uk>
Description:
 vorbis-tools - several Ogg Vorbis tools
 vorbis-tools-dbg - several Ogg Vorbis tools (debug files)
Closes: 239073 312185 728062 771448 772391 772766 772976 772978 776086 797461
Changes:
 vorbis-tools (1.4.0-7ubuntu1) xenial; urgency=low
 .
   * Merge with Debian, remaining changes:
     - build --without-kate; avoid MIR for kate/liboggz
 .
 vorbis-tools (1.4.0-7) unstable; urgency=low
 .
   [ Martin Steghöfer ]
   * Format patches for gbp-pq, correct tagging and add missing
     information to tagging.
   * Add sampling rate sanity check to avoid crash (in case of unpatched
     libvorbis version) or to improve error message (with patched libvorbis).
   * Fix vorbistagedit: Reading of file list from stdin was broken.
     (Closes: #771448)
   * Documentation of vorbistagedit: Improve wording of error message.
   * Fix bashism in /usr/bin/vorbistagedit (negative status code).
     (Closes: #772391)
   * Truncate long status lines on small terminals (Closes: #239073)
   * Fix ogg123 speex stereo playback: Initialize stereo information
     data structure (Closes: #312185)
   * Fix ogg123 speex playback: Initialize channel matrix (Closes: #772766)
   * Add low-priority mailcap entry for "ogginfo" on action "cat".
     (Closes: #728062)
   * Fix oggdec crash/hang: Don't ignore stream errors (Closes: #772978)
   * Use translations in oggdec (Closes: #772976)
 .
   [ Petter Reinholdtsen ]
   * Add debian/gbp.conf to enforce the user of pristine-tar.
   * oggenc: Fix large alloca on bad AIFF input to oggenc
     (CVE-2015-6749). (Closes: #797461)
   * oggenc: Validate count of channels in the header
     (CVE-2014-9638, CVE-2014-9639). (Closes: #776086)
Checksums-Sha1:
 2569ec85d3f04682311ad6eed41fc321d8e8ff98 2258 vorbis-tools_1.4.0-7ubuntu1.dsc
 bec1df4ce25599cfae05f9af61c9874891ae7c3e 21440 vorbis-tools_1.4.0-7ubuntu1.debian.tar.xz
Checksums-Sha256:
 78a60fb288fc69527b13db736bb16bf7348ee9ca509307446038b299ba46a4ae 2258 vorbis-tools_1.4.0-7ubuntu1.dsc
 13d9d32f355d542b52b6c6014be26bdc6b312e7f1240e419033f052fb4ea0e94 21440 vorbis-tools_1.4.0-7ubuntu1.debian.tar.xz
Files:
 dac58152936aedac74cec21c1edc9713 2258 sound optional vorbis-tools_1.4.0-7ubuntu1.dsc
 eb2f525b8f8deb0fb40824d96f86fd11 21440 sound optional vorbis-tools_1.4.0-7ubuntu1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=TxnO
-----END PGP SIGNATURE-----