Accepted mp3gain 1.5.2-r2-6 (source amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 19 Mar 2014 09:24:09 +0000
Source: mp3gain
Binary: mp3gain
Architecture: source amd64
Version: 1.5.2-r2-6
Distribution: unstable
Urgency: high
Maintainer: Fabrizio Regalli <fabreg@fabreg.it>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
mp3gain - Lossless mp3 normalizer with statistical analysis
Closes: 740268
Changes:
mp3gain (1.5.2-r2-6) unstable; urgency=high
.
* Add various patches from Daniel Kobras' mpg123 packaging to fix
buffer overflows in the embedded copy/fork of mpglib
- CVE-2003-0577 (originally #201698 in mpg123)
- CVE-2004-0805 (originally #270542 in mpg123)
- CVE-2004-0991
- CVE-2006-1655 (originally #361863 in mpg123)
(Closes: #740268, hopefully)
* debian/patches/*.diff: adjust so gbp-pq can import all of them
* debian/patches/*.diff: update Sourceforge bug URLs to new layout
(but keep the old versions for posterity)
Checksums-Sha1:
d716fa773cf5dc110d774f58abe2598830dec1cc 1869 mp3gain_1.5.2-r2-6.dsc
25a8fc372ae43f1dc64ccf7f883afad0157ab96f 16696 mp3gain_1.5.2-r2-6.debian.tar.xz
ef54e54c762c5b03735688a4eefba8eb6a56f89d 100602 mp3gain_1.5.2-r2-6_amd64.deb
Checksums-Sha256:
bdd3862534113fb57b7c3b14928b5f3272759404b97ea3c726ff15a4bacab6e8 1869 mp3gain_1.5.2-r2-6.dsc
f14572f7c37c663ea18d7e62aeb26f7a43ec3bb7a759cc138cc2018a1f4e6b7e 16696 mp3gain_1.5.2-r2-6.debian.tar.xz
9a8a8a8872da70f5000ea24ce431573f1b44d6fdd8936ef278e9c275cbc5b94f 100602 mp3gain_1.5.2-r2-6_amd64.deb
Files:
8cebcd68f5077506f722b188ff3ef01e 1869 sound optional mp3gain_1.5.2-r2-6.dsc
fae320a3b8a7adc95065350170c297ff 16696 sound optional mp3gain_1.5.2-r2-6.debian.tar.xz
ebb4d4dfb47a8f1116af9f2c68a52576 100602 sound optional mp3gain_1.5.2-r2-6_amd64.deb
-----BEGIN PGP SIGNATURE-----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=e3Jg
-----END PGP SIGNATURE-----