Change log : mp3gain package : Debian

1.6.2-2

Published in bookworm-release on 2023-06-01

Published in bullseye-release on 2021-07-22

Published in sid-release on 2020-12-29

mp3gain (1.6.2-2) unstable; urgency=medium

  [ Helmut Grohne ]
  * Fix FTCBFS: Let dh_auto_build pass cross tools to make. (Closes: #973274)

  [ Stefan Fritsch ]
  * CVE-2018-10777, CVE-2019-18359: Fix crashes with invalid ape tags.
    Patch from SUSE.
    Closes: #973932
  * No longer build with ASAN, it's not recommended as a hardening measure.
    Closes: #974890

 -- Stefan Fritsch <email address hidden>  Tue, 29 Dec 2020 15:08:09 +0100

Available diffs

diff from 1.6.2-1 to 1.6.2-2 (2.8 KiB)

1.6.2-1

Superseded in sid-release on 2020-12-29

mp3gain (1.6.2-1) unstable; urgency=high

  [ Scott Hardin ]
  * New upstream release.
  * Remove all patches. They have been merged in to upstream.
  * Bump standards version to 3.9.8 (no changes).
  * Bump debhelper compatibility level to 10.
  * Update debhelper (>= 10).
  * Updated Vcs-* fields.
  * Add hardening build option to satisfy lintian.
  * Add new build dependency to reflect departure from forked
    version of mpg123.
  * Update copyrights to reflect departure from forked mpg123.

  [ Stefan Fritsch ]
  * Add myself as uploader.

 -- Stefan Fritsch <email address hidden>  Sun, 11 Oct 2020 17:40:06 +0200

1.5.2-r2-2+deb7u1

Published in wheezy-release on 2014-04-26

mp3gain (1.5.2-r2-2+deb7u1) wheezy; urgency=high


  * Add various patches from Daniel Kobras' mpg123 packaging to fix
    buffer overflows in the embedded copy/fork of mpglib
    - CVE-2003-0577 (originally #201698 in mpg123)
    - CVE-2004-0805 (originally #270542 in mpg123)
    - CVE-2004-0991
    - CVE-2006-1655 (originally #361863 in mpg123)
    (Closes: #740268)

 -- Simon McVittie <email address hidden>  Wed, 02 Apr 2014 09:06:57 +0100

1.5.2-r2-6

Deleted in sid-release (Reason: None provided.)

mp3gain (1.5.2-r2-6) unstable; urgency=high


  * Add various patches from Daniel Kobras' mpg123 packaging to fix
    buffer overflows in the embedded copy/fork of mpglib
    - CVE-2003-0577 (originally #201698 in mpg123)
    - CVE-2004-0805 (originally #270542 in mpg123)
    - CVE-2004-0991
    - CVE-2006-1655 (originally #361863 in mpg123)
    (Closes: #740268, hopefully)
  * debian/patches/*.diff: adjust so gbp-pq can import all of them
  * debian/patches/*.diff: update Sourceforge bug URLs to new layout
    (but keep the old versions for posterity)

 -- Simon McVittie <email address hidden>  Wed, 19 Mar 2014 09:24:09 +0000

Available diffs

diff from 1.5.2-r2-3 to 1.5.2-r2-6 (7.8 KiB)

1.5.2-r2-5

Deleted in jessie-release (Reason: None provided.)

Superseded in sid-release on 2014-03-20

mp3gain (1.5.2-r2-5) unstable; urgency=high


  * Only build with -fsanitize=address on Linux with amd64, i386, armel,
    armhf, powerpc CPUs: it isn't functional everywhere

 -- Simon McVittie <email address hidden>  Tue, 11 Mar 2014 22:17:39 +0000

1.5.2-r2-4

Superseded in sid-release on 2014-03-12

mp3gain (1.5.2-r2-4) unstable; urgency=high


  * Build with -fsanitize=address to catch stack buffer overflows
    (mitigates: #740268)

 -- Simon McVittie <email address hidden>  Mon, 10 Mar 2014 09:42:23 +0000

1.5.2-r2-3

Superseded in jessie-release on 2014-03-14

Superseded in sid-release on 2014-03-12

mp3gain (1.5.2-r2-3) unstable; urgency=medium


  * Update debian/watch to a version by Bart Martens to deal with the upstream
    file-naming convention
  * Use dpkg-recommended build flags
  * 13_constant_expr.diff: use constant expressions to size arrays
  * Standards-Version: 3.9.5 (no changes needed)

 -- Simon McVittie <email address hidden>  Sat, 25 Jan 2014 13:03:44 +0000

Available diffs

diff from 1.5.2-r2-2 (in Ubuntu) to 1.5.2-r2-3 (2.0 KiB)

1.5.2-r2-2

Superseded in jessie-release on 2014-01-31

Superseded in wheezy-release on 2014-04-26

Superseded in sid-release on 2014-01-27

mp3gain (1.5.2-r2-2) unstable; urgency=low


  [ Simon McVittie ]
  * Specifically enable pristine-tar when using git-buildpackage for this
    package

  [ Fabrizio Regalli ]
  * Fixed Vcs-Browser field in d/control.
  * Refreshed all previous patches.
  * Added 12_force_update.diff patch. (Closes: #587466)
  * Update d/copyright to latest DEP5 revision.

 -- Fabrizio Regalli <email address hidden>  Thu, 10 Nov 2011 16:10:48 +0100

1.5.2-r2-1

Superseded in wheezy-release on 2011-11-29

Superseded in sid-release on 2011-11-19

mp3gain (1.5.2-r2-1) unstable; urgency=low
  [ Fabrizio Regalli ]  * New upstream version.  * Switch to quilt 3.0 format.  * New maintainer. (Closes: #619847)  * Switch d/compat to 8.  * Update debhelper (>= 8).  * Removed dpatch from dependecies.  * Bump to Standards-Version: 3.9.2.  * Added Vcs-*  * Removed dpatch.make from d/rules.  * Switch to DEP5 license format.  * Added txxx patch for extra ID3v2 replaygain tags. (Closes: #587465)  [ Simon McVittie ]  * Correctly credit myself, not Stefan, for my TXXX patch :-)  * Change machine-readable license from LGPL-1 to LGPL-2+ to match the text    of the license grant (Fabrizio gave permission for this in an email)  * Add myself to Uploaders  * Reinstate most of Stefan's patches, adjusted to apply to mp3gain.c    despite DOS line endings  * Override installation path when running make, not by patching Makefile -- Simon McVittie <email address hidden>  Mon, 11 Jul 2011 21:45:45 +0100

Available diffs

diff from 1.5.1-4 to 1.5.2-r2-1 (55.2 KiB)

1.5.1-4

Superseded in wheezy-release on 2011-09-21

Published in squeeze-release on 2010-09-08