Bug#742161: wheezy-pu: package mp3gain/1.5.2-r2-2+deb7u1
Control: tags -1 + pending
On Sat, 2014-04-12 at 22:17 +0100, Simon McVittie wrote:
> On 01/04/14 21:48, Adam D. Barratt wrote:
> > On Wed, 2014-03-19 at 23:54 +0000, Simon McVittie wrote:
> >> mp3gain, an implementation of ReplayGain volume normalization, contains
> >> a very old modified version of mpglib, an MPEG audio decoder maintained
> >> as part of mpg123.
> ...
> > Please go ahead; thanks.
>
> Uploaded. Sorry for the delay, my test environment for it was rather
> awkward (I didn't want to try suspicious exploits in a network-connected
> environment, when there was a possibility they might still work). No
> changes other than the changelog.
Thanks; flagged for acceptance.
> Would you be interested in a squeeze update? The patches appear to be
> the same, apart from some end-of-line \r adjustments to make them apply.
> A possible debdiff is attached; so far its status is "compiles in
> sbuild, but untested". I would of course test it on a squeeze system
> with all the mpg123 exploits I've been able to find before uploading.
If the issues still affect squeeze, I'd be happy to look at fixing them
there. Please could you open a separate bug for that when you're ready,
so that we can track the status of the uploads separately?
Regards,
Adam
Reply to: