ffmpeg_3.2.8-1~deb9u1_source.changes ACCEPTED into proposed-updates->stable-new, proposed-updates

[Debian FTP Masters]

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 09 Oct 2017 18:57:17 +0200
Source: ffmpeg
Binary: ffmpeg ffmpeg-doc libavcodec57 libavcodec-extra57 libavcodec-extra libavcodec-dev libavdevice57 libavdevice-dev libavfilter6 libavfilter-extra6 libavfilter-extra libavfilter-dev libavformat57 libavformat-dev libavresample3 libavresample-dev libavutil55 libavutil-dev libpostproc54 libpostproc-dev libswresample2 libswresample-dev libswscale4 libswscale-dev libav-tools
Architecture: source
Version: 7:3.2.8-1~deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers at lists.alioth.debian.org>
Changed-By: Sebastian Ramacher <sramacher at debian.org>
Description:
 ffmpeg     - Tools for transcoding, streaming and playing of multimedia files
 ffmpeg-doc - Documentation of the FFmpeg multimedia framework
 libav-tools - Compatibility links for libav-tools (transitional package)
 libavcodec-dev - FFmpeg library with de/encoders for audio/video codecs - developm
 libavcodec-extra - FFmpeg library with extra codecs (metapackage)
 libavcodec-extra57 - FFmpeg library with additional de/encoders for audio/video codecs
 libavcodec57 - FFmpeg library with de/encoders for audio/video codecs - runtime
 libavdevice-dev - FFmpeg library for handling input and output devices - developmen
 libavdevice57 - FFmpeg library for handling input and output devices - runtime fi
 libavfilter-dev - FFmpeg library containing media filters - development files
 libavfilter-extra - FFmpeg library with extra filters (metapackage)
 libavfilter-extra6 - FFmpeg library with extra media filters - runtime files
 libavfilter6 - FFmpeg library containing media filters - runtime files
 libavformat-dev - FFmpeg library with (de)muxers for multimedia containers - develo
 libavformat57 - FFmpeg library with (de)muxers for multimedia containers - runtim
 libavresample-dev - FFmpeg compatibility library for resampling - development files
 libavresample3 - FFmpeg compatibility library for resampling - runtime files
 libavutil-dev - FFmpeg library with functions for simplifying programming - devel
 libavutil55 - FFmpeg library with functions for simplifying programming - runti
 libpostproc-dev - FFmpeg library for post processing - development files
 libpostproc54 - FFmpeg library for post processing - runtime files
 libswresample-dev - FFmpeg library for audio resampling, rematrixing etc. - developme
 libswresample2 - FFmpeg library for audio resampling, rematrixing etc. - runtime f
 libswscale-dev - FFmpeg library for image scaling and various conversions - develo
 libswscale4 - FFmpeg library for image scaling and various conversions - runtim
Changes:
 ffmpeg (7:3.2.8-1~deb9u1) stretch-security; urgency=high
 .
   * New upstream release.
     - avformat/rmdec: Fix DoS due to lack of eof check. (CVE-2017-14054)
     - avformat/mvdec: Fix DoS due to lack of eof check. (CVE-2017-14055)
     - avformat/rl2: Fix DoS due to lack of eof check. (CVE-2017-14056)
     - avformat/asfdec: Fix DoS due to lack of eof check. (CVE-2017-14057)
     - avformat/hls: Fix DoS due to infinite loop. (CVE-2017-14058)
     - avformat/cinedec: Fix DoS due to lack of eof check. (CVE-2017-14059)
     - avformat/mxfdec: Fix Sign error. (CVE-2017-14169)
     - avformat/mxfdec: Fix DoS issues. (CVE-2017-14170)
     - avformat/nsvdec: Fix DoS due to lack of eof check. (CVE-2017-14171)
     - avformat/mov: Fix DoS. (CVE-2017-14222)
     - avformat/asfdec: Fix DoS. (CVE-2017-14223)
     - ffprobe: Fix null pointer dereference with color primaries.
       (CVE-2017-14225)
     - avformat/rtpdec_h264: Fix heap-buffer-overflow. (CVE-2017-14767)
Checksums-Sha1:
 163937758e7423cfb52b4c3eb80ff0d0a3f2949d 4907 ffmpeg_3.2.8-1~deb9u1.dsc
 24e308432a60ddee59eac7809b33ad820f8208b3 8035768 ffmpeg_3.2.8.orig.tar.xz
 f8a5812df5a1d8b7cf6131ad85bdc9b0bf4c614c 38944 ffmpeg_3.2.8-1~deb9u1.debian.tar.xz
Checksums-Sha256:
 277e302cbfa1e1f5e6c00bb12093c44a0fca1d9c9b5943fb311fc723ee8e068e 4907 ffmpeg_3.2.8-1~deb9u1.dsc
 42e7362692318afc666f14378dd445effa9a1b09787504a6ab5811fe442674cd 8035768 ffmpeg_3.2.8.orig.tar.xz
 51e2e6226a14f10130efbb47f91c6ecb13f2dc44b1e04e2157b856307fcdfb3e 38944 ffmpeg_3.2.8-1~deb9u1.debian.tar.xz
Files:
 3b4b3ae3de3469c4237d56eda0d3bc93 4907 video optional ffmpeg_3.2.8-1~deb9u1.dsc
 5b2e4773e9c82af2889bd2fd09570d78 8035768 video optional ffmpeg_3.2.8.orig.tar.xz
 aa9347464527767e77bb766964c448b2 38944 video optional ffmpeg_3.2.8-1~deb9u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=CK+u
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.