Accepted taglib 1.9.1-2.1+deb8u1 (source amd64 all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 18 Jul 2018 10:03:02 +0200
Source: taglib
Binary: libtag1c2a libtag1-vanilla libtag1-dev libtag1-doc libtagc0 libtagc0-dev
Architecture: source amd64 all
Version: 1.9.1-2.1+deb8u1
Distribution: jessie-security
Urgency: medium
Maintainer: Modestas Vainius <modax@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libtag1-dev - audio meta-data library - development files
libtag1-doc - audio meta-data library - API documentation
libtag1-vanilla - audio meta-data library - vanilla flavour
libtag1c2a - audio meta-data library
libtagc0 - audio meta-data library - C bindings
libtagc0-dev - audio meta-data library - development files for C bindings
Changes:
taglib (1.9.1-2.1+deb8u1) jessie-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* CVE-2018-11439
Fix for a heap-based buffer over-read via a crafted audio file.
Checksums-Sha1:
3c784e054e9668c619cef0f6885a8a3a4c3680c4 2434 taglib_1.9.1-2.1+deb8u1.dsc
4fa426c453297e62c1d1eff64a46e76ed8bebb45 654074 taglib_1.9.1.orig.tar.gz
e3eeb70a9245c63b0398fb356064622708663f71 30976 taglib_1.9.1-2.1+deb8u1.debian.tar.xz
50edca97dc45d79b8d82bc3ece8c4abd39686d58 17690 libtag1c2a_1.9.1-2.1+deb8u1_amd64.deb
aaeca25f9ee2a57478ce4a9bb514984a664be232 297256 libtag1-vanilla_1.9.1-2.1+deb8u1_amd64.deb
52442201bad4d1d4bfb31c8f561e61b84a44d0c4 83902 libtag1-dev_1.9.1-2.1+deb8u1_amd64.deb
15bc1355f08ce4abb386679313af9a3e2d4c1943 8689210 libtag1-doc_1.9.1-2.1+deb8u1_all.deb
fb2c4a9e7b2e48c68f80a5a9edeffba2c3e32cae 22776 libtagc0_1.9.1-2.1+deb8u1_amd64.deb
7ae60cf4a8c8819ec238228633b3af3dfbbb1371 20316 libtagc0-dev_1.9.1-2.1+deb8u1_amd64.deb
Checksums-Sha256:
0746fb9076dc9bc0a7ed38a06898a73e04f3c0ff71632df15724ad155330afe2 2434 taglib_1.9.1-2.1+deb8u1.dsc
72d371cd1419a87ae200447a53bff2be219283071e80fd12337928cc967dc71a 654074 taglib_1.9.1.orig.tar.gz
a215657632d883edca55177ef09ad8506e7172113fb64a24ca430f314b2c0ba7 30976 taglib_1.9.1-2.1+deb8u1.debian.tar.xz
75f79043096adc53ed8aac22f3a35f902f1610459f9ef8603cddb3246face96d 17690 libtag1c2a_1.9.1-2.1+deb8u1_amd64.deb
9e98e6047370023163e820a3ad6d0f120b54968b8bf2b2f2191c269587b81355 297256 libtag1-vanilla_1.9.1-2.1+deb8u1_amd64.deb
b230cf95fef019c6392dbe58f50dc1c370dcca5321818d884af8863c9ab6d392 83902 libtag1-dev_1.9.1-2.1+deb8u1_amd64.deb
f9954f34578f18483030ed72ba2710c2339dc0534a3dc0ecca5d35d39d9d71b7 8689210 libtag1-doc_1.9.1-2.1+deb8u1_all.deb
16b610470dc6fa3e8635d27aa13b05f898a0273561c05811036e3e76b8cbefa6 22776 libtagc0_1.9.1-2.1+deb8u1_amd64.deb
ce6f452feca83a3b62a5e4440d52de2b27bc93edc7effbef899256854d2cded6 20316 libtagc0-dev_1.9.1-2.1+deb8u1_amd64.deb
Files:
9f2320fc1273ef9d61c71e1aede7b21a 2434 libs optional taglib_1.9.1-2.1+deb8u1.dsc
0d35df96822bbd564c5504cb3c2e4d86 654074 libs optional taglib_1.9.1.orig.tar.gz
08951a0988c2f6c33f9998ef8c4dee53 30976 libs optional taglib_1.9.1-2.1+deb8u1.debian.tar.xz
cb0143c41e1823caf9857efb0d1fd8c1 17690 libs optional libtag1c2a_1.9.1-2.1+deb8u1_amd64.deb
5e3fcd095f0a1f1ff1401dc88fa1037d 297256 libs optional libtag1-vanilla_1.9.1-2.1+deb8u1_amd64.deb
95a1afc7736b4f7a60d8f555f812dc13 83902 libdevel optional libtag1-dev_1.9.1-2.1+deb8u1_amd64.deb
73523e42653ed2399971eb65c40b4858 8689210 doc optional libtag1-doc_1.9.1-2.1+deb8u1_all.deb
2a9dfb1e0c56b302300acc6078d4c929 22776 libs optional libtagc0_1.9.1-2.1+deb8u1_amd64.deb
a2445fdddcdac061a00691bdb983caf5 20316 libdevel optional libtagc0-dev_1.9.1-2.1+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=h5mg
-----END PGP SIGNATURE-----