Accepted libvorbis 1.3.6-2 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 25 Feb 2019 22:02:32 +0100
Source: libvorbis
Architecture: source
Version: 1.3.6-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Florian Schlichting <fsfs@debian.org>
Closes: 772877 876780 899590
Changes:
libvorbis (1.3.6-2) unstable; urgency=medium
.
* Team upload
.
[ Ondřej Nový ]
* d/tests: Use AUTOPKGTEST_TMP instead of ADTTMP
* d/changelog: Remove trailing whitespaces
* d/control: Remove trailing whitespaces
* d/control: Set Vcs-* to salsa.debian.org
.
[ Florian Schlichting ]
* Set Maintainer address to Debian Multimedia Maintainers (closes: #899590)
* Cherry-pick two patches from upstream git (closes: #876780):
+ 0003-CVE-2017-14160-fix-bounds-check-on-very-low-sample-r.patch
(this is also CVE-2018-10393)
+ 0004-Sanity-check-number-of-channels-in-setup.patch (CVE-2018-10392)
* Use secure URIs for xiph.org
* Update d/copyright to copyright-format 1.0
* Bump dh compat to level 12
* Enable all hardening build flags
* Add Build-Depends-Package field to symbols files
* Declare compliance with Debian Policy 4.3.0
* Drop debian/source.lintian-overrides, it is apparently unused
* Make lintian happy: "I" is a number here
* Update debian/tests/test-examples, the examples are no longer gzipped at
this compat level
* Add 0005-vorbisenc-detect-if-new-template-is-null.patch from upstream git
to fix the autopkgtest (closes: #772877)
Checksums-Sha1:
3329b76f2eab5c7a17c50c1ab72b3cf28b535718 2310 libvorbis_1.3.6-2.dsc
6a72cc2f8bea038cc5ea8226ab31df3f3402f118 12084 libvorbis_1.3.6-2.debian.tar.xz
e197e5fe11605cefea8b4831b30a0b22ba7dd9fa 7195 libvorbis_1.3.6-2_amd64.buildinfo
Checksums-Sha256:
bf04834eef80f0ea2369c6aaa3b399a9356275815b0a87659f208d79fdae1ef4 2310 libvorbis_1.3.6-2.dsc
5ce95b27205c2ce5e39f263da5acaa4063846377aec905ede2f64f933f3cfbf6 12084 libvorbis_1.3.6-2.debian.tar.xz
895be4f83568e191be35820f048314d336710bbfb8b346d8f49b4cae5006bad5 7195 libvorbis_1.3.6-2_amd64.buildinfo
Files:
1dc38465b7cb5715a82d6720178ab15e 2310 libs optional libvorbis_1.3.6-2.dsc
8423d3966fa028e2c243c89023ef1de8 12084 libs optional libvorbis_1.3.6-2.debian.tar.xz
b7c403a81ccf11c6c69fe266dde8e140 7195 libs optional libvorbis_1.3.6-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=0U2M
-----END PGP SIGNATURE-----