Accepted audacity 1.3.5-2+lenny1 (source amd64)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 06 Feb 2009 22:11:20 +0100
Source: audacity
Binary: audacity
Architecture: source amd64
Version: 1.3.5-2+lenny1
Distribution: testing-security
Urgency: high
Maintainer: Debian Multimedia Team <debian-multimedia@lists.debian.org>
Changed-By: Nico Golde <nion@debian.org>
Description:
audacity - A fast, cross-platform audio editor
Closes: 514138
Changes:
audacity (1.3.5-2+lenny1) testing-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Fix stack-based buffer overflow in String_parse::get_nonspace_quoted()
used when importing MIDI files leading to arbitrary code execution
(midi_parsing_overflow.patch; No CVE id yet; Closes: #514138).
Checksums-Sha1:
bc009737073117ee2585748d678ef409891f4074 1399 audacity_1.3.5-2+lenny1.dsc
35c1cf05fbc9408da1e751dff817870ded58be64 6445478 audacity_1.3.5.orig.tar.gz
f6098d5d3170ba273b90a450cf9fa4cce389609e 23294 audacity_1.3.5-2+lenny1.diff.gz
1af540b379ed570c6179947a873a01619be65139 3328198 audacity_1.3.5-2+lenny1_amd64.deb
Checksums-Sha256:
1a96b72a1a9e67750adb1ba236e270b56a1f9b50709ea4ed58bea4632b8f79af 1399 audacity_1.3.5-2+lenny1.dsc
6b79ad24c4e81b9e6c611c11ea0a520ef3fac446b32d40939064bda11e7452fa 6445478 audacity_1.3.5.orig.tar.gz
af82ec36e359bb0aa24f75b1a48fd0098eddeb9cd8cfebda6ae8eaea760949ba 23294 audacity_1.3.5-2+lenny1.diff.gz
e4e773ee0df9cbd4a3d7c386f2a0f1256cd8a943c42a5e313a6e8ecbefa3ebc2 3328198 audacity_1.3.5-2+lenny1_amd64.deb
Files:
3219107631974f3f6bff459ca386055e 1399 sound optional audacity_1.3.5-2+lenny1.dsc
49fb288b0d8da28be53e06210fdc8521 6445478 sound optional audacity_1.3.5.orig.tar.gz
594d1d2822f0d1482211fd8da3a2f125 23294 sound optional audacity_1.3.5-2+lenny1.diff.gz
a42a9a968aa925fad762bead64d79fd3 3328198 sound optional audacity_1.3.5-2+lenny1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkmMq5MACgkQHYflSXNkfP8llACcCLiEgP8tOMKWjCdY4zdeWSVL
MhgAn2aqHR91pss/ZUwh/gEOjvt8Ahoi
=nqMZ
-----END PGP SIGNATURE-----
Accepted:
audacity_1.3.5-2+lenny1.diff.gz
to pool/main/a/audacity/audacity_1.3.5-2+lenny1.diff.gz
audacity_1.3.5-2+lenny1.dsc
to pool/main/a/audacity/audacity_1.3.5-2+lenny1.dsc
audacity_1.3.5-2+lenny1_amd64.deb
to pool/main/a/audacity/audacity_1.3.5-2+lenny1_amd64.deb
Reply to: