-
vorbis-tools (1.1.1-3ubuntu0.1) dapper-security; urgency=low
* SECURITY UPDATE: array index vulnerability (LP: #218652)
* debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c
to properly validate its input
* References
CVE-2008-1686
-- Jamie Strandboge <email address hidden> Wed, 07 May 2008 14:00:29 -0400
-
vorbis-tools (1.1.1-3) unstable; urgency=low
* Switch patch management to quilt.
-- Adeodato Simó <email address hidden> Mon, 16 Jan 2006 22:49:20 +0100
-
vorbis-tools (1.1.1-2) unstable; urgency=medium
* Switch maintenance to the Debian Xiph.org Maintainers (alioth/pkg-xiph).
* Fix display of non-ASCII characters in comments, broken in 1.1.1 release.
(Closes: #344195, #344917)
[File: upstream_r10080_fix_non-ascii_comments.diff]
* Patch configure not to use -ffast-math, which is reportedly broken on
alpha. While we're at it, do not use -O20 (!) either.
[File: no_fast-math.diff]
* Add debian/watch file.
-- Adeodato Simó <email address hidden> Tue, 27 Dec 2005 23:08:25 +0100
-
vorbis-tools (1.1.1-1) unstable; urgency=low
* New upstream release packaged (closes: #339846).
* Pull patch from upstream to prevent vorbiscomment from clobbering files
when an error happens. (Closes: #287170)
[File: upstream_r9935-dont_clobber_file_on_error.diff]
* Add myself as an uploader, as agreed with Christopher in the past;
note it in debian/copyright.
* Update debian/control:
+ drop unnecessary build-dependencies on bison and devscripts.
+ build-depend on libcurl3-gnutls-dev instead of libcurl3-dev | libcurl-dev
(vorbis-tools is GPL'ed, no SSL exception).
+ drop version restriction on all build-dependencies, since they'd be all
satisfied with stable.
* Overhaul debian/rules.
* Make use of debian/patches, putting in separate files the patches applied
in previous NMUs (deactivated some of them because they no longer apply
and/or are incomplete, until I figure out what to do with them; reopens:
#272037, #264365).
* Update download URL in debian/copyright.
* Bumped Standards-Version to 3.6.2 (no changes required).
-- Adeodato Simó <email address hidden> Wed, 07 Dec 2005 06:21:02 +0100
