Accepted libextractor 1:1.7-1 (source amd64) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 09 Sep 2018 07:15:53 +0200
Source: libextractor
Binary: libextractor3 libextractor-dev extract
Architecture: source amd64
Version: 1:1.7-1
Distribution: unstable
Urgency: medium
Maintainer: Bertrand Marc <bmarc@debian.org>
Changed-By: Bertrand Marc <bmarc@debian.org>
Description:
extract - displays meta-data from files of arbitrary type
libextractor-dev - extracts meta-data from files of arbitrary type (development)
libextractor3 - extracts meta-data from files of arbitrary type (library)
Closes: 888373 904903 904905 907987
Changes:
libextractor (1:1.7-1) unstable; urgency=medium
.
* New upstream version 1.7:
+ fix stack-buffer-underflow (Closes: #904903, CVE-2018-14346).
+ fix infinite loop in extract (Closes: #904905, CVE-2018-14347).
+ fix build with FFmpeg 4.0 (Closes: #888373).
* Move the package to salsa and update Vcs-browser and Vcs-git accordingly.
* Remove build-dependency on mp4v2, as the plugin is not working anyway.
* Remove CVE-2017-15922.patch and CVE-2017-17440.patch, included upstream.
* Add a patch to fix missing 0-terminator on corrupted ZIP files
(Closes: #907987, CVE-2018-16430).
* Standards-version: 4.2.1.
Checksums-Sha1:
6e1f98225c1bc2b678004a3c6b2a370568352f37 2435 libextractor_1.7-1.dsc
d1c4e870cc327aa6527621c3ef497968471e2f05 8075299 libextractor_1.7.orig.tar.gz
95ab74a8a2626b14c74a21b354470d50ad54b401 17220 libextractor_1.7-1.debian.tar.xz
b0b2d539563dc36cfd2e2cad39b9c9cc6f96f287 26680 extract-dbgsym_1.7-1_amd64.deb
37fe87111211ac222adcb3e74975eba8bbaf00b6 111816 extract_1.7-1_amd64.deb
1892e4e1dcc1c4b5ad85cfdefa0b4e6840a3d381 27240 libextractor-dev_1.7-1_amd64.deb
4e918ce8c45c8f9bf0b08528459a3faf8e6a9b9f 603740 libextractor3-dbgsym_1.7-1_amd64.deb
9bf838c32a7f7cceb398c1759a16e697bffda4a2 112904 libextractor3_1.7-1_amd64.deb
98cacb0fba7c277104b0b84ee4afdb41099611c3 18663 libextractor_1.7-1_amd64.buildinfo
Checksums-Sha256:
fc3aae0f1919741d28ec2352ba4d54b7a9905df927e83677feaf1e035bbe35f1 2435 libextractor_1.7-1.dsc
e0a6fde824cf2212c4f217a5e0fc03391251cfb46ca000117f66cf7ae4368e8f 8075299 libextractor_1.7.orig.tar.gz
c0c4e7980b97643d69ff03031ada4814c9d57b9fcb47f8c32377f7426fa8bb25 17220 libextractor_1.7-1.debian.tar.xz
dad6bb165d0053b8c04a6501650129498e67642fa9b2467e7a6f11d3121aca32 26680 extract-dbgsym_1.7-1_amd64.deb
54be9c8093b490e6cc28370b429f53fc009ac5d1cd9254186f2a0ea55582d7e1 111816 extract_1.7-1_amd64.deb
34238cb24e03aea02989aa925a551abb74e01e816b407f7dbc0093ea0b57943a 27240 libextractor-dev_1.7-1_amd64.deb
c623564ab808c5003384da03bbad7d3a0bb92534eb2442aef1a40a0947ddc5cc 603740 libextractor3-dbgsym_1.7-1_amd64.deb
bf5edf01960b54f1fa5d17131ca6d27d26d46e5c4bf5b3493f8a2695d19ede14 112904 libextractor3_1.7-1_amd64.deb
60da98c95c6d2ec653074dc3ff1b1ec94f57a7dc05d18ec10e3d94ac05ad0f4c 18663 libextractor_1.7-1_amd64.buildinfo
Files:
a9a862ed791a5af84d67241227a70e5e 2435 libs optional libextractor_1.7-1.dsc
bbc301fd71a8ee2889d3c69988910faf 8075299 libs optional libextractor_1.7.orig.tar.gz
6dd062a5c77e63b59bad223a5652746c 17220 libs optional libextractor_1.7-1.debian.tar.xz
c470046fc276aaaddb51e5aadf115994 26680 debug optional extract-dbgsym_1.7-1_amd64.deb
968558fc2ec59fb234706ede8d951140 111816 utils optional extract_1.7-1_amd64.deb
19c3241e4116a0cc03f44eb59f74f895 27240 libdevel optional libextractor-dev_1.7-1_amd64.deb
fa619eb4c64a339a27e434b2ba498e6a 603740 debug optional libextractor3-dbgsym_1.7-1_amd64.deb
30f9b0dd4745d97293d3f95c1ee647c0 112904 libs optional libextractor3_1.7-1_amd64.deb
f07d35904b2a8e034e78ad1d849ee76c 18663 libs optional libextractor_1.7-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=BB8p
-----END PGP SIGNATURE-----
Reply to: