package: libtheora version: 1.0~beta3-1 severity: serious tags: security Hi,
I have prepared a lenny package for the theora issues that are were recently addressed in xulrunner. Note that two of them never got a CVE (one should probably be requested), but have been fixed ever since the first release of firefox 3.5. The package is at http://alioth.debian.org/~gilbert-guest/libtheora and the debdiff is attached. These issues are already fixed in unstable. Please coordinate with the security team to release a DSA for lenny. Thanks, Mike
libtheora-lenny.debdiff
Description: Binary data
