Your message dated Fri, 20 Aug 2010 11:35:24 +0000
with message-id <e1ompsa-0007zv...@franck.debian.org>
and subject line Bug#592669: fixed in vlc 1.1.3-1
has caused the Debian Bug report #592669,
regarding vlc-nox: ID3v2 parser crash on some MP3 file (CVE-2010-2937)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
592669: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=592669
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: vlc-nox
Version: 1.1.1-1
Severity: important
Tags: upstream patch security
Hello,
VLC fails to perform sufficient input validation when trying to extract some
meta-informations about input media through ID3v2 tags. In the failure case,
VLC attempt dereference an invalid memory address, and a crash will ensure.
See http://www.videolan.org/security/sa1004.html
for patch and further references.
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (100, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.35 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages vlc-nox depends on:
ii liba52-0.7.4 0.7.4-14 library for decoding ATSC A/52 str
ii libasound2 1.0.23-1 shared library for ALSA applicatio
ii libass4 0.9.9-1 library for SSA/ASS subtitles rend
ii libavahi-client3 0.6.27-1 Avahi client library
ii libavahi-common3 0.6.27-1 Avahi common library
ii libavc1394-0 0.5.3-1+b2 control IEEE 1394 audio/video devi
ii libavcodec52 4:0.6-2 ffmpeg codec library
ii libavformat52 4:0.6-2 ffmpeg file format library
ii libavutil49 4:0.5.2-2 ffmpeg utility library
ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib
ii libcaca0 0.99.beta17-1 colour ASCII art library
ii libcddb2 1.3.2-2 library to access CDDB data - runt
ii libcdio10 0.81-4 library to read and control CD-ROM
ii libdbus-1-3 1.2.24-3 simple interprocess messaging syst
ii libdc1394-22 2.1.2-3 high level programming interface f
ii libdca0 0.0.5-3 decoding library for DTS Coherent
ii libdirac-encoder0 1.0.2-3 open and royalty free high quality
ii libdvbpsi6 0.1.7-1 library for MPEG TS and DVB PSI ta
ii libdvdnav4 4.1.3-7 DVD navigation library
ii libdvdread4 4.1.3-10 library for reading DVDs
ii libebml0 0.7.7-3.1 access library for the EBML format
ii libfaad2 2.7-4 freeware Advanced Audio Decoder -
ii libflac8 1.2.1-2+b1 Free Lossless Audio Codec - runtim
ii libfontconfig1 2.8.0-2.1 generic font configuration library
ii libfreetype6 2.4.0-2 FreeType 2 font engine, shared lib
ii libfribidi0 0.19.2-1 Free Implementation of the Unicode
ii libgcc1 1:4.4.4-8 GCC support library
ii libgcrypt11 1.4.5-2 LGPL Crypto library - runtime libr
ii libgnutls26 2.8.6-1 the GNU TLS library - runtime libr
ii libgpg-error0 1.6-1 library for common error values an
ii libkate1 0.3.7-3 Kate is a codec for karaoke and te
ii liblircclient0 0.8.3-5 infra-red remote control support -
ii liblua5.1-0 5.1.4-5 Simple, extensible, embeddable pro
ii libmad0 0.15.1b-5 MPEG audio decoder library
ii libmatroska0 0.8.1-1.1 extensible open standard audio/vid
ii libmpcdec6 2:0.1~r459-1 MusePack decoder - library
ii libmpeg2-4 0.4.1-3 MPEG1 and MPEG2 video decoder libr
ii libmtp8 1.0.3-1 Media Transfer Protocol (MTP) libr
ii libncursesw5 5.7+20100313-2 shared libraries for terminal hand
ii libogg0 1.2.0~dfsg-1 Ogg bitstream library
ii libpng12-0 1.2.44-1 PNG library - runtime
ii libpostproc51 4:0.6-2 ffmpeg video postprocessing librar
ii libproxy0 0.3.1-1 automatic proxy configuration mana
ii libraw1394-11 2.0.5-2 library for direct access to IEEE
ii libschroedinger-1.0-0 1.0.9-2 library for encoding/decoding of D
ii libshout3 2.2.2-5+b1 MP3/Ogg Vorbis broadcast streaming
ii libsmbclient 2:3.4.8~dfsg-2 shared library for communication w
ii libspeex1 1.2~rc1-1 The Speex codec runtime library
ii libstdc++6 4.4.4-8 The GNU Standard C++ Library v3
ii libswscale0 4:0.6-2 ffmpeg video scaling library
ii libtag1c2a 1.6.3-1 TagLib Audio Meta-Data Library
ii libtheora0 1.1.1+dfsg.1-3 The Theora Video Compression Codec
ii libtwolame0 0.3.12-1 MPEG Audio Layer 2 encoding librar
ii libudev0 160-1 libudev shared library
ii libupnp3 1:1.6.6-5 Portable SDK for UPnP Devices, ver
ii libv4l-0 0.8.0-1 Collection of video4linux support
ii libvcdinfo0 0.7.23-4+b2 library to extract information fro
ii libvlc5 1.1.2-1 multimedia player and streamer lib
ii libvlccore4 1.1.2-1 base library for VLC and its modul
ii libvorbis0a 1.3.1-1 The Vorbis General Audio Compressi
ii libvorbisenc2 1.3.1-1 The Vorbis General Audio Compressi
ii libxcb1 1.6-1 X C Binding
ii libxml2 2.7.7.dfsg-4 GNOME XML library
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
vlc-nox recommends no packages.
vlc-nox suggests no packages.
Versions of packages vlc depends on:
ii libaa1 1.4p5-38 ascii art library
ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib
ii libfreetype6 2.4.0-2 FreeType 2 font engine, shared lib
ii libfribidi0 0.19.2-1 Free Implementation of the Unicode
ii libgcc1 1:4.4.4-8 GCC support library
ii libgl1-mesa-glx [libgl1 7.7.1-4 A free implementation of the OpenG
ii libglib2.0-0 2.24.1-1 The GLib library of C routines
ii libgtk2.0-0 2.20.1-1 The GTK+ graphical user interface
ii libnotify1 [libnotify1- 0.5.0-2 sends desktop notifications to a n
ii libqtcore4 4:4.6.3-1 Qt 4 core module
ii libqtgui4 4:4.6.3-1 Qt 4 GUI module
ii libsdl-image1.2 1.2.10-2+b1 image loading library for Simple D
ii libsdl1.2debian 1.2.14-6 Simple DirectMedia Layer
ii libstdc++6 4.4.4-8 The GNU Standard C++ Library v3
ii libtar 1.2.11-6 C library for manipulating tar arc
ii libvlccore4 1.1.2-1 base library for VLC and its modul
ii libx11-6 2:1.3.3-3 X11 client-side library
ii libx11-xcb1 2:1.3.3-3 Xlib/XCB interface library
ii libxcb-keysyms1 0.3.6-1 utility libraries for X C Binding
ii libxcb-randr0 1.6-1 X C Binding, randr extension
ii libxcb-shm0 1.6-1 X C Binding, shm extension
ii libxcb-xv0 1.6-1 X C Binding, xv extension
ii libxcb1 1.6-1 X C Binding
ii libxext6 2:1.1.2-1 X11 miscellaneous extension librar
ii ttf-dejavu-core 2.31-1 Vera font family derivate with add
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
Versions of packages libvlc5 depends on:
ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib
ii libvlccore4 1.1.2-1 base library for VLC and its modul
Versions of packages libvlccore4 depends on:
ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib
ii libdbus-1-3 1.2.24-3 simple interprocess messaging syst
ii vlc-data 1.1.2-1 Common data for VLC
Versions of packages vlc-nox is related to:
ii libavutil50 4:0.6-2 ffmpeg utility library
pn libavutil51 <none> (no description available)
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: vlc
Source-Version: 1.1.3-1
We believe that the bug you reported is fixed in the latest version of
vlc, which is due to be installed in the Debian FTP archive:
libvlc-dev_1.1.3-1_i386.deb
to main/v/vlc/libvlc-dev_1.1.3-1_i386.deb
libvlc5_1.1.3-1_i386.deb
to main/v/vlc/libvlc5_1.1.3-1_i386.deb
libvlccore-dev_1.1.3-1_i386.deb
to main/v/vlc/libvlccore-dev_1.1.3-1_i386.deb
libvlccore4_1.1.3-1_i386.deb
to main/v/vlc/libvlccore4_1.1.3-1_i386.deb
mozilla-plugin-vlc_1.1.3-1_i386.deb
to main/v/vlc/mozilla-plugin-vlc_1.1.3-1_i386.deb
vlc-data_1.1.3-1_all.deb
to main/v/vlc/vlc-data_1.1.3-1_all.deb
vlc-dbg_1.1.3-1_i386.deb
to main/v/vlc/vlc-dbg_1.1.3-1_i386.deb
vlc-nox_1.1.3-1_i386.deb
to main/v/vlc/vlc-nox_1.1.3-1_i386.deb
vlc-plugin-fluidsynth_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-fluidsynth_1.1.3-1_i386.deb
vlc-plugin-ggi_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-ggi_1.1.3-1_i386.deb
vlc-plugin-jack_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-jack_1.1.3-1_i386.deb
vlc-plugin-notify_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-notify_1.1.3-1_i386.deb
vlc-plugin-pulse_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-pulse_1.1.3-1_i386.deb
vlc-plugin-sdl_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-sdl_1.1.3-1_i386.deb
vlc-plugin-svg_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-svg_1.1.3-1_i386.deb
vlc-plugin-svgalib_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-svgalib_1.1.3-1_i386.deb
vlc-plugin-zvbi_1.1.3-1_i386.deb
to main/v/vlc/vlc-plugin-zvbi_1.1.3-1_i386.deb
vlc_1.1.3-1.debian.tar.gz
to main/v/vlc/vlc_1.1.3-1.debian.tar.gz
vlc_1.1.3-1.dsc
to main/v/vlc/vlc_1.1.3-1.dsc
vlc_1.1.3-1_i386.deb
to main/v/vlc/vlc_1.1.3-1_i386.deb
vlc_1.1.3.orig.tar.bz2
to main/v/vlc/vlc_1.1.3.orig.tar.bz2
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 592...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Reinhard Tartler <siret...@tauware.de> (supplier of updated vlc package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 20 Aug 2010 06:59:17 +0200
Source: vlc
Binary: libvlc5 libvlc-dev libvlccore4 libvlccore-dev mozilla-plugin-vlc vlc
vlc-data vlc-dbg vlc-nox vlc-plugin-fluidsynth vlc-plugin-ggi vlc-plugin-jack
vlc-plugin-notify vlc-plugin-pulse vlc-plugin-sdl vlc-plugin-svg
vlc-plugin-svgalib vlc-plugin-zvbi
Architecture: source all i386
Version: 1.1.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian multimedia packages maintainers
<pkg-multimedia-maintainers@lists.alioth.debian.org>
Changed-By: Reinhard Tartler <siret...@tauware.de>
Description:
libvlc-dev - development files for libvlc
libvlc5 - multimedia player and streamer library
libvlccore-dev - development files for libvlccore
libvlccore4 - base library for VLC and its modules
mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC
vlc - multimedia player and streamer
vlc-data - Common data for VLC
vlc-dbg - debugging symbols for vlc
vlc-nox - multimedia player and streamer (without X support)
vlc-plugin-fluidsynth - FluidSynth plugin for VLC
vlc-plugin-ggi - GGI video output plugin for VLC
vlc-plugin-jack - Jack audio plugins for VLC
vlc-plugin-notify - LibNotify plugin for VLC
vlc-plugin-pulse - PulseAudio plugin for VLC
vlc-plugin-sdl - SDL video and audio output plugin for VLC
vlc-plugin-svg - SVG plugin for VLC
vlc-plugin-svgalib - SVGAlib video output plugin for VLC
vlc-plugin-zvbi - VBI teletext plugin for VLC
Closes: 592669
Changes:
vlc (1.1.3-1) unstable; urgency=medium
.
[ Benjamin Drung ]
* New upstream release.
+ Fix insufficient input validation in TagLib plugin.
(VideoLAN-SA-1004, CVE-2010-2937) (Closes: #592669, LP: #616510)
+ Set urgency to medium
* 502_xulrunner_191.diff: Shorten, split into two parts, and refresh it.
* Drop 102_dejavu_font.diff and depend on ttf-freefont instead of ttf-
dejavu-core. ttf-freefont is very likely to be present on a Debian
box, because cups depends on it.
* Drop 501_decrease_alsa_buffer.diff. The pulseaudio output module has
a higher priority than the ALSA output plugin and should be used on
pulseaudio systems.
.
[ Reinhard Tartler ]
* add DM-Upload-Allowed field to debian/control
Checksums-Sha1:
25759343b5fb0c77aad67e7c17868d3d18f0e96e 3691 vlc_1.1.3-1.dsc
7dc8a8ea2284800d762f4a00b675474684a04e30 23887407 vlc_1.1.3.orig.tar.bz2
bacb595c58c1d4a42b24acd4347b2c5e31554acb 108325 vlc_1.1.3-1.debian.tar.gz
310d108e3c04c5f5e519a43736c6c65063d41d39 7774262 vlc-data_1.1.3-1_all.deb
df54d79ebb9d2d7c7dd73ea870d81670b9ee6516 43832 libvlc5_1.1.3-1_i386.deb
e7c09c5f199044d8904c4a23cd8666d90435767f 63200 libvlc-dev_1.1.3-1_i386.deb
7a833f96239e8c961e93efb92518038923665444 444942 libvlccore4_1.1.3-1_i386.deb
4ae146528cc7f5cec16a186fda4ed1da2c87c934 615858 libvlccore-dev_1.1.3-1_i386.deb
57573bdb75d0f49e227ec12df38d5b8100e37101 47528
mozilla-plugin-vlc_1.1.3-1_i386.deb
927f56029583073db8e8376bf46ed54d6abe9d34 2002588 vlc_1.1.3-1_i386.deb
0fc02cc2740dabc81a88cd7a59c698ecf6166928 13828620 vlc-dbg_1.1.3-1_i386.deb
7b2886fd0574b6a66ebc76883c069205ad88574c 3176930 vlc-nox_1.1.3-1_i386.deb
8156559cc617612a9c3c8f29669456ac402ee403 5836
vlc-plugin-fluidsynth_1.1.3-1_i386.deb
961b7b4a7425cc8fc8a925b264621c0a3f933e73 6032 vlc-plugin-ggi_1.1.3-1_i386.deb
51b39b77876517920712c1868799ba2cad48de3c 11042 vlc-plugin-jack_1.1.3-1_i386.deb
3e0244bd338444f637c13e46b5f599e2acbeea1c 5920
vlc-plugin-notify_1.1.3-1_i386.deb
d9e5c4baeb59314fa81bd33cde2f50a87fbbad60 7130 vlc-plugin-pulse_1.1.3-1_i386.deb
559c390365c961056d7d126faf5b75c1e8f5421d 12484 vlc-plugin-sdl_1.1.3-1_i386.deb
23b60ed4608572ebacd34a1fcaa59b3a55742753 7240 vlc-plugin-svg_1.1.3-1_i386.deb
49df4fc32ecc3e33fc0ec2852aa4f3349b58da7c 4680
vlc-plugin-svgalib_1.1.3-1_i386.deb
90f12f4a48d757b72c59febd81bb86a8823f1e04 8758 vlc-plugin-zvbi_1.1.3-1_i386.deb
Checksums-Sha256:
53b667aa61811e8bc13e690e8838ce79f75f78e07570473fe4996dc494cf248c 3691
vlc_1.1.3-1.dsc
128c31f8c5cebbc947c2cf337cfb1877350f7e282826c76dc69e1218765e83e5 23887407
vlc_1.1.3.orig.tar.bz2
0de257270d19e230893fbd30af3520a5d2516fb8ed55c2e34b6a702a4166f04e 108325
vlc_1.1.3-1.debian.tar.gz
c182e5557bb1ccb2d9c5e27dbd203f403b4e63a2026a3a6e88349946e5798f20 7774262
vlc-data_1.1.3-1_all.deb
c1de30ac37dad22cdf17e5939561759cec6e99f083fcc23d991541bce9853023 43832
libvlc5_1.1.3-1_i386.deb
9803b5b12480bb9e0bac11c5a987193604587beaf0bd34ae08bf82812cab81d6 63200
libvlc-dev_1.1.3-1_i386.deb
d80804399d32e3f3a8c899df4403712ce5bd0171ff0619a34e1f3ffa24aa1441 444942
libvlccore4_1.1.3-1_i386.deb
c45a3d4edbdc7e95ddc343baef2f25749890cbc9c3a4861a201e71b9741cb238 615858
libvlccore-dev_1.1.3-1_i386.deb
f9d4e2e2eb2f7c410272ec5f323f614a305d2ef9ff152b0ff9349a258474bbda 47528
mozilla-plugin-vlc_1.1.3-1_i386.deb
9251bff73b28c38e88977fd4b83edec155348b1ab532148c52a224a583860532 2002588
vlc_1.1.3-1_i386.deb
a32e206bf13fa6a18d1034bf340a32e30844424ab054922fdf6e926c20541d59 13828620
vlc-dbg_1.1.3-1_i386.deb
4db5abc9dc6c519d2b95f9aeabeb268745a70fb73f782ea9534420269d4f7918 3176930
vlc-nox_1.1.3-1_i386.deb
ea75a05c4764682dc37f343e5ac706941cf33789f435ed4345498b487b3f5d52 5836
vlc-plugin-fluidsynth_1.1.3-1_i386.deb
a7f45d9f4e4e9aa9951462723fe53f6aeb44fb2a73fb9302d81b223562708985 6032
vlc-plugin-ggi_1.1.3-1_i386.deb
940cecc70d04fde62e61374f51a3dbdd1c909e045ae80affce56de9c03ef76ce 11042
vlc-plugin-jack_1.1.3-1_i386.deb
8b1d468813a5f32252abd8501b851ec15c03c0083e9d090b1e0e0e2bb93110c5 5920
vlc-plugin-notify_1.1.3-1_i386.deb
0a41f813e8ade8e2e0fb4ecbc427f2c784d851e2f6124ebd85f13694fa6c4e97 7130
vlc-plugin-pulse_1.1.3-1_i386.deb
53c629c48807cde2c89c5212503a82d94af8a2768cbc6e05d590dec5f74cd0e5 12484
vlc-plugin-sdl_1.1.3-1_i386.deb
25d187a5c244bb3920680b291739537359c4463050e92763099cbff3ede1957e 7240
vlc-plugin-svg_1.1.3-1_i386.deb
7ede76733a0fe4a8651d77ba5eadc3c9e0bf517cecfe8619877d515ebdaf745b 4680
vlc-plugin-svgalib_1.1.3-1_i386.deb
3c1f6b91b13ba0e47ea59452eee6619e39c14e1522df99aa7a59f453ff325b59 8758
vlc-plugin-zvbi_1.1.3-1_i386.deb
Files:
46f1638d74fbf5107726fc7e9e17aaba 3691 video optional vlc_1.1.3-1.dsc
b8ba8b6687d19dadcf3eb148ca525603 23887407 video optional vlc_1.1.3.orig.tar.bz2
2d012ebda4cec8287a190ccc1b546b8f 108325 video optional
vlc_1.1.3-1.debian.tar.gz
0f42fc4d5a4aa9b1e870332bcf9dc99d 7774262 video optional
vlc-data_1.1.3-1_all.deb
c86d1a3212f63a6432ddda984370ba39 43832 libs optional libvlc5_1.1.3-1_i386.deb
eb7a03e6670622897e7a843297b47adb 63200 libdevel optional
libvlc-dev_1.1.3-1_i386.deb
4fc5ea41974437618a2265211b3ba2ef 444942 libs optional
libvlccore4_1.1.3-1_i386.deb
84d3b1bcaa1e18209d9c99d775823e65 615858 libdevel optional
libvlccore-dev_1.1.3-1_i386.deb
1cd6d77483be1a239bb3592c6d3dea63 47528 video optional
mozilla-plugin-vlc_1.1.3-1_i386.deb
1ce0497307d17c273db52f43684b5bd6 2002588 video optional vlc_1.1.3-1_i386.deb
9524b3c8d70fbf454ab0b8e9a1f53d70 13828620 debug extra vlc-dbg_1.1.3-1_i386.deb
e829df74604a3a79ca23c78b9b641dd0 3176930 video optional
vlc-nox_1.1.3-1_i386.deb
ca98b0fa740d189edc0fa79c2f4cccd5 5836 video optional
vlc-plugin-fluidsynth_1.1.3-1_i386.deb
506e14b088fe54a30239d21e2b2dbd60 6032 video optional
vlc-plugin-ggi_1.1.3-1_i386.deb
50332ecc52cf03a0d86aa3a9ce4aee68 11042 video optional
vlc-plugin-jack_1.1.3-1_i386.deb
e38b83b15917d6bd69def2776f72dbe8 5920 video optional
vlc-plugin-notify_1.1.3-1_i386.deb
a0ff6ad16c45155c44e418ecbddbe490 7130 video optional
vlc-plugin-pulse_1.1.3-1_i386.deb
d5afa1edb9bf8c9c43d014b7223faa4d 12484 video optional
vlc-plugin-sdl_1.1.3-1_i386.deb
4047bec4bd5e8e9d73d9aa57eef26cb5 7240 video optional
vlc-plugin-svg_1.1.3-1_i386.deb
142aa290487574acdb14ea9218b34a7a 4680 video optional
vlc-plugin-svgalib_1.1.3-1_i386.deb
22b3de4a8a9345f8f84f2cca0908ff02 8758 video optional
vlc-plugin-zvbi_1.1.3-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Debian Powered!
iJwEAQECAAYFAkxuY9sACgkQ78RAoABp8o/blQP/fUnyZNKlxttV3p0xz9VwuyJv
RikFl45AYSKZCNkBkoAjhVwBeX0p/sg2JvLIohoA+6OV9I4n87ojDZfyMsJUXcjd
5hMuqqnvFhjxnDFAvwef0H6lT071n//q5R5gTv+fNHQ8RWOk5V9csfkPwEgR7uT0
8xqJnXbvfrdx1mAgqpM=
=4ekS
-----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________
pkg-multimedia-maintainers mailing list
pkg-multimedia-maintainers@lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-multimedia-maintainers
