-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 23 Nov 2025 10:22:40 +0100
Source: rplay
Architecture: source
Version: 3.3.2-22
Distribution: unstable
Urgency: medium
Maintainer: Thorsten Alteholz <debian@alteholz.de>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 118224 1039352
Changes:
rplay (3.3.2-22) unstable; urgency=medium
.
* CVE-2025-62672
fix SIGSEGV with crafted packets in rplay_unpack()
(Closes: #118224)
Unfortunately this issue can not be fixed in rplay_unpack(), so this
function has been deprecated and a new function rplay_unpack_n() has
been introduced. The old function rplay_unpack() now always returns
an error. According to codesearch.d.n, rplay_unpack() is only used
in rplay itself but not in any reverse dependency, so no other
package should be affected by this change.
* rplay-server: add systemd unit file (Closes: #1039352)
Checksums-Sha1:
53a4f630f79c9fdbaffb4c1e37a928c62b16fcd9 2364 rplay_3.3.2-22.dsc
fda94b7e7c91c4d09bf1f0535ba4647799c7cba0 476308 rplay_3.3.2.orig.tar.gz
05350777db625dc0c912c63e72d38b730830e590 40592 rplay_3.3.2-22.debian.tar.xz
657a73380deab9b79e0f513cb22ece5d3728565a 9139 rplay_3.3.2-22_amd64.buildinfo
Checksums-Sha256:
ab72eda93ec635e5def189b7e5375af0de8f40f1e5a72235b169bdbb9fc25bfa 2364 rplay_3.3.2-22.dsc
63e99ebf9bfa83314cf2707674b6fc0ce2d2985e1b4bbaed28b74dd7fdc2d5e6 476308 rplay_3.3.2.orig.tar.gz
9fb28e55a976419bf813718c0423deb75bfddf3f7ac6a96c73d38b88497c0766 40592 rplay_3.3.2-22.debian.tar.xz
d76c70035ee8655f1f287e8afe252942577b45f130d3be2974787a2eea87dce5 9139 rplay_3.3.2-22_amd64.buildinfo
Files:
268bb408efc230c2a92e1d9cba113003 2364 sound optional rplay_3.3.2-22.dsc
58052373adf8ad04ef3ce13e8ac0921a 476308 sound optional rplay_3.3.2.orig.tar.gz
4cd7ddebab02fe63660c92efd2a0ab6e 40592 sound optional rplay_3.3.2-22.debian.tar.xz
13b1aff181f933b845b4b7e5edd98f48 9139 sound optional rplay_3.3.2-22_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=gcrh
-----END PGP SIGNATURE-----
Attachment:
pgpzySnvGdN0J.pgp
Description: PGP signature