Accepted libass 0.13.4-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 05 Oct 2016 18:23:34 +0200
Source: libass
Binary: libass-dev libass5
Architecture: source
Version: 0.13.4-1
Distribution: unstable
Urgency: high
Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Description:
libass-dev - development files for libass
libass5 - library for SSA/ASS subtitles rendering
Changes:
libass (0.13.4-1) unstable; urgency=high
.
* New upstream release.
- Fix memory reallocation in the shaper. (CVE-2016-7972)
- Fix illegal read in Gaussian blur coefficient calculations.
(CVE-2016-7970)
- Fix mode 0/3 line wrapping equalization in specific cases which could
result in illegal reads while laying out and shaping text.
(CVE-2016-7969)
Checksums-Sha1:
967e2ed39b3e82d3980a7fe533eff9a3f15d3fac 2109 libass_0.13.4-1.dsc
94310b35ccb997d0b9b61cfcd2eaa51d4c7f191c 350840 libass_0.13.4.orig.tar.xz
db532ce2d2c4569e846014200b86cb59a40cc546 5548 libass_0.13.4-1.debian.tar.xz
Checksums-Sha256:
afe3eb386d4c25157b0f9c6917e76c8254bb79f4fddd632367b37b31ede41544 2109 libass_0.13.4-1.dsc
d84a2fc89011b99d87fc47af91906622707c165d1860e9f774825ebbbc9c9fb6 350840 libass_0.13.4.orig.tar.xz
219ca973f4c81a415ae488346ac85b892ad83d0f21520ae7c498044d0f90e5da 5548 libass_0.13.4-1.debian.tar.xz
Files:
781e584dd3ca727b2ddcb61227c11296 2109 libs optional libass_0.13.4-1.dsc
414caae86700f6905215ae0267e14912 350840 libs optional libass_0.13.4.orig.tar.xz
9175acbfdfe434e866d90f2c87e1d37a 5548 libs optional libass_0.13.4-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=0C56
-----END PGP SIGNATURE-----