Accepted ffmpeg 7:4.1.3-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 19 May 2019 17:22:10 +0200
Source: ffmpeg
Architecture: source
Version: 7:4.1.3-1
Distribution: unstable
Urgency: high
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Closes: 926666
Changes:
ffmpeg (7:4.1.3-1) unstable; urgency=high
.
* Team upload.
* New upstream release. (Closes: #926666)
- Fix bug in subtitle decoder enabling DoS attacks (CVE-2019-9718,
CVE-2019-9721)
- Fix bug in studio profile decoder enabling DoS attacks (CVE-2019-11339)
- Fix bug mishandling HEVC data enabling DoS attacks (CVE-2019-11338)
Checksums-Sha1:
fbbe8dfce895ec10ea1d317696e9c0623359d755 5179 ffmpeg_4.1.3-1.dsc
1c99bfe0323477fc302baec4c825f2e49634c466 8895988 ffmpeg_4.1.3.orig.tar.xz
df69f4eff63cc54ec03e9a2e414998f6e28156f4 473 ffmpeg_4.1.3.orig.tar.xz.asc
7fe65dec4a3de0a51575e738672623bbc93930d5 47504 ffmpeg_4.1.3-1.debian.tar.xz
Checksums-Sha256:
91840eaa390e1fdb3c089ccda6de9d23ad840a5a69b2d75391d8fcee440209dc 5179 ffmpeg_4.1.3-1.dsc
0c3020452880581a8face91595b239198078645e7d7184273b8bcc7758beb63d 8895988 ffmpeg_4.1.3.orig.tar.xz
8e88fe42e57d9375a7848c03d5d5a0421dcfe5efade401cda13851bbbfe59a72 473 ffmpeg_4.1.3.orig.tar.xz.asc
eb0c9fa87a695a883f57e37efaa5a352405751aa53060da06d7fb4add0ac8220 47504 ffmpeg_4.1.3-1.debian.tar.xz
Files:
ac7612538434cb6a26938e3222053817 5179 video optional ffmpeg_4.1.3-1.dsc
dcc20dd2682ea01c678b7b8324339d43 8895988 video optional ffmpeg_4.1.3.orig.tar.xz
be36a4412f6ff92b3b5781b6ec829c6f 473 video optional ffmpeg_4.1.3.orig.tar.xz.asc
da216ff4b5dbd023a47a4f15a051133f 47504 video optional ffmpeg_4.1.3-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=B/wf
-----END PGP SIGNATURE-----