faad2_2.8.0~cvs20161113-1+deb9u1_amd64.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Mapping stretch to stable.
Mapping stable to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 01 May 2018 17:49:02 +0200
Source: faad2
Binary: faad faad2-dbg libfaad-dev libfaad2
Architecture: source amd64
Version: 2.8.0~cvs20161113-1+deb9u1
Distribution: stretch
Urgency: high
Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers at lists.alioth.debian.org>
Changed-By: Markus Koschany <apo at debian.org>
Description:
 faad       - freeware Advanced Audio Decoder player
 faad2-dbg  - freeware Advanced Audio Decoder - debugging symbols
 libfaad-dev - freeware Advanced Audio Decoder - development files
 libfaad2   - freeware Advanced Audio Decoder - runtime files
Closes: 889915
Changes:
 faad2 (2.8.0~cvs20161113-1+deb9u1) stretch; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2017-9218, CVE-2017-9219, CVE-2017-9220, CVE-2017-9221,
     CVE-2017-9222, CVE-2017-9223, CVE-2017-9253, CVE-2017-9254, CVE-2017-9255,
     CVE-2017-9256, CVE-2017-9257.
     Various issues were discovered in faad2, a fast audio decoder, that could
     cause a denial of service (large loop and CPU consumption) via a crafted
     mp4 file. (Closes: #889915)
Checksums-Sha1:
 60045cd562096a31ad47cd417cce0b585ffa4b61 2414 faad2_2.8.0~cvs20161113-1+deb9u1.dsc
 db6423f4e85349e0111aeb24724d160ab1e5b54d 17832 faad2_2.8.0~cvs20161113-1+deb9u1.debian.tar.xz
 6f3ad0b2c137ae50bce01d46c1cb5d1ab96b7bcb 504446 faad2-dbg_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 11eaccc37a70c36969808b1d7d0e32ea12901324 6917 faad2_2.8.0~cvs20161113-1+deb9u1_amd64.buildinfo
 1643fb9be522c6e4e2b0dcadd20f0b60a6874621 38584 faad_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 5736d1137455a414f595d8bb7f51bdcfd142b573 182670 libfaad-dev_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 d7fb4765e64987f90d02a044c38a297466677933 167128 libfaad2_2.8.0~cvs20161113-1+deb9u1_amd64.deb
Checksums-Sha256:
 55f30bfc708b26107ce4c66759366cb3cc325e8b3dc12911729d7cafaf19f26d 2414 faad2_2.8.0~cvs20161113-1+deb9u1.dsc
 56580e3420a1ae2f103fc542e4a4ea46e229828a852f874823755fbfc033626b 17832 faad2_2.8.0~cvs20161113-1+deb9u1.debian.tar.xz
 74f74ad2e694c593aaead02848e92360d07e670aa0df762df68ecc4d46fd4cf4 504446 faad2-dbg_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 41d00c67e0e9c7f0905b73e603fd28831f57e68874e974a41a7950155fca581d 6917 faad2_2.8.0~cvs20161113-1+deb9u1_amd64.buildinfo
 ad8286cad1bab2d4db7862a5c9133d78ebef45c40460e22cee40ac87a5e8ee9b 38584 faad_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 b8f19dc1698ad78b1f0b847e548729810d1fd684bf545b402b69acdffb76e9f1 182670 libfaad-dev_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 cf16b2e939d0dded2d13c8c57ebc12997b283dfaabb073914471234f6eb4c254 167128 libfaad2_2.8.0~cvs20161113-1+deb9u1_amd64.deb
Files:
 d30ffe94a5af246fc9b8816c088f79ca 2414 libs optional faad2_2.8.0~cvs20161113-1+deb9u1.dsc
 9b28daf5c71fdd42cdf7c9e13ace82a7 17832 libs optional faad2_2.8.0~cvs20161113-1+deb9u1.debian.tar.xz
 e4fce44a27c1f4bd1c56086fdf9363fc 504446 debug extra faad2-dbg_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 265408b39692b1e902cfe549f564b980 6917 libs optional faad2_2.8.0~cvs20161113-1+deb9u1_amd64.buildinfo
 2d8431119e8bc2e9b378d50ed18f2368 38584 sound optional faad_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 3042c55f1d26477512a15734858196dc 182670 libdevel optional libfaad-dev_2.8.0~cvs20161113-1+deb9u1_amd64.deb
 eea637e5a699f8fb48d9f4c4da1c4178 167128 libs optional libfaad2_2.8.0~cvs20161113-1+deb9u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=aAXi
-----END PGP SIGNATURE-----


Thank you for your contribution to Debian.