This bug was fixed in the package xine-lib - 1.1.14-1ubuntu1

---------------
xine-lib (1.1.14-1ubuntu1) intrepid; urgency=low

  * merge from debian unstable. Remaining changes:
    - disable the jack plugin
      in libxine1-bin to make dapper->hardy upgrades work (LP #203605)
    - Modify Maintainer value to match the DebianMaintainerField
      specification.
  * New upstream fixes:
    - playback of MJPEG files LP: #93076
    - CVE-2008-1878 LP: #235904
    - CVE-2008-1686 LP: #218652
  * remove Replaces: libxine-main1 (<< 1.1.2+repacked1-0ubuntu1). We don't
    support upgrades from dapper/feisty anymore.

xine-lib (1.1.14-1) unstable; urgency=low

  * The "beat the freeze" release.
  * New upstream release.
    - All patches in 1.1.12-2 are present upstream.
    - MIME types added. (Closes: #472869)
  * Build-depend on libmagick9-dev | libmagick-dev | libmagickwand-dev.
  * Build-depend on ghostscript | gs | gs-gpl.

 -- Reinhard Tartler <[EMAIL PROTECTED]>   Tue, 08 Jul 2008 22:35:48
+0200

** Changed in: xine-lib (Ubuntu)
       Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1878

-- 
CVE-2008-1686: Multiple speex implementations insufficient boundary checks
https://bugs.launchpad.net/bugs/218652
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gst-plugins-good0.10 in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to