Your message dated Mon, 07 May 2018 11:35:50 +0000 with message-id <e1ffeqo-000j1c...@fasolo.debian.org> and subject line Bug#889915: fixed in faad2 2.7-8+deb8u1 has caused the Debian Bug report #889915, regarding libfaad2 in Wheezy contains patches for some security bugs. They were not backported to Jessie. to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 889915: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=889915 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: libfaad2 Version: 2.7-8 Severity: normal Dear Maintainer, Libfaad2 in Wheezy contains some security patches. But the patches were not backported to Jessie. -- System Information: Debian Release: 8.10 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable') Architecture: i386 (i586) Kernel: Linux 4.14.16 (PREEMPT) Locale: LANG=cs_CZ, LC_CTYPE=cs_CZ (charmap=ISO-8859-2) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages libfaad2 depends on: ii libc6 2.19-18+deb8u10 ii multiarch-support 2.19-18+deb8u10 libfaad2 recommends no packages. libfaad2 suggests no packages. -- no debconf information
--- End Message ---
--- Begin Message ---Source: faad2 Source-Version: 2.7-8+deb8u1 We believe that the bug you reported is fixed in the latest version of faad2, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 889...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Markus Koschany <a...@debian.org> (supplier of updated faad2 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 01 May 2018 17:36:53 +0200 Source: faad2 Binary: libfaad-dev libfaad2 faad2-dbg faad Architecture: source amd64 Version: 2.7-8+deb8u1 Distribution: jessie Urgency: high Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintain...@lists.alioth.debian.org> Changed-By: Markus Koschany <a...@debian.org> Description: faad - freeware Advanced Audio Decoder player faad2-dbg - freeware Advanced Audio Decoder - debugging symbols libfaad-dev - freeware Advanced Audio Decoder - development files libfaad2 - freeware Advanced Audio Decoder - runtime files Closes: 889915 Changes: faad2 (2.7-8+deb8u1) jessie; urgency=high . * Non-maintainer upload. * Fix CVE-2017-9218, CVE-2017-9219, CVE-2017-9220, CVE-2017-9221, CVE-2017-9222, CVE-2017-9223, CVE-2017-9253, CVE-2017-9254, CVE-2017-9255, CVE-2017-9256, CVE-2017-9257. Various issues were discovered in faad2, a fast audio decoder, that could cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. (Closes: #889915) Checksums-Sha1: 0b1fd8e93ed71237c9c4584581c3f26ce0437fd5 2367 faad2_2.7-8+deb8u1.dsc 4b5ec73005521388c1005472a2484a6452996de7 20356 faad2_2.7-8+deb8u1.debian.tar.xz 033c684215d6f2fd190af365da83405716b9f805 158716 libfaad-dev_2.7-8+deb8u1_amd64.deb f3baebd2501262e8aec002291cc61eb2b9165699 146230 libfaad2_2.7-8+deb8u1_amd64.deb 5b2bb2fda99795372558097a58683427c7d42213 274240 faad2-dbg_2.7-8+deb8u1_amd64.deb a44b2463e4a7084bbfa30c7f4d2568fb123000a5 36600 faad_2.7-8+deb8u1_amd64.deb Checksums-Sha256: 45040c8779397c6775abf063cbad9f82cb4a884241d3c9cd415288a6de445f96 2367 faad2_2.7-8+deb8u1.dsc dbc3b9f16e1e446ea59d5e3bfd5996fbb05911edcaed0f3caa0120f35e741365 20356 faad2_2.7-8+deb8u1.debian.tar.xz 8de3a84b6c9ebf6d32887b125c0ca640a88ff7495239fb429f3129ab047e0f60 158716 libfaad-dev_2.7-8+deb8u1_amd64.deb 33ab540ddbdcc0ec1b77cf14502994297fadffeabd346eb2574351f2e1e65f85 146230 libfaad2_2.7-8+deb8u1_amd64.deb b3ec5096e940449e1ba3fe4d205f132a2ad8a483d4d3b067e9fbde2410804a96 274240 faad2-dbg_2.7-8+deb8u1_amd64.deb da9b51e54f96ab3ecd6497ca2edd086706ce237ddec3e90ee1aea1074b847b4d 36600 faad_2.7-8+deb8u1_amd64.deb Files: e8ed677b2ac463b23b5034b25fd1b643 2367 libs optional faad2_2.7-8+deb8u1.dsc bd0975fe83c4a9dd133e4abcea9cfae5 20356 libs optional faad2_2.7-8+deb8u1.debian.tar.xz d714461876e2f0cecd58866c71364832 158716 libdevel optional libfaad-dev_2.7-8+deb8u1_amd64.deb 739e7b903dc7a2459e90bce4406cae6a 146230 libs optional libfaad2_2.7-8+deb8u1_amd64.deb 0b52e4523196cb3fec1688afcd26c5af 274240 debug extra faad2-dbg_2.7-8+deb8u1_amd64.deb c9268b4c827ea4ce67214bf80b02ed9a 36600 sound optional faad_2.7-8+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlrokXJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hkjw8P/RJlSeFIk0jbgD3NKUaaOFe56Q+nUpudv1po KdZMRoV5f/JHTdLMOupQIp614zvnFdxzA55fR3a2r0HeyhoZj5hgdF8OgI3tlSnH +rodozayMBOpOp7IOF1Pc1q+ku5qA6j6au2ZcvsiAnW95rcWhhrer0kFuRnF72sX +NiSWVHsu7l+erc/omMEVn7Z6EB+B0fNY/Gy9LSet8D6/Ypx0/rubE2L62gynVED MCR/ORkpE73K3IFdj+u/4g3X1nPhTIXliQb8MG8/+DbGSGbUZ+RmePn40+SG3MWn 8E0cr7MWGHoHFup5S9rSLajU1BB2eakUXFxzZn3XjAddj9r7WVC7NwG2/eRrw0LR 8pHG/2sfzLwhU06j13XP2Zv+ymMOSL3+QA+9QuaKWTifaFNgmoKpt3UKqGqfXNy5 o6T9pGcbZJfN+/yGL3J+DLDFk+zmVknpquxHLuzi/udcB27EEgiw3vR1voekJQ5p zHbkcPp2DW7TiaNeLrgeMfNhtngZ+8mmJwmDsU37H6EoMu7Jtm7KSSU4wMnTjKuR pAJB9DIJ9XXi05kZwaQZyfeeuH1Un80wTUG3/Q0Ga70qk2FTmx1gzYDNqdpHlXf6 fzciSX5K/sUolxaKqYH3yZ/gPUfjGxCZtYEtPWBSz9k3n2w1+4VkV1PYnRjtLlJq IvJyYvEx =yDvI -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-multimedia-maintainers
