Your message dated Wed, 24 Jan 2007 08:32:02 +0000 with message-id <[EMAIL PROTECTED]> and subject line Bug#407956: fixed in gst-plugins-bad0.10 0.10.3-3.1 has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what I am talking about this indicates a serious mail system misconfiguration somewhere. Please contact me immediately.) Debian bug tracking system administrator (administrator, Debian Bugs database)
--- Begin Message ---Package: gst-plugins-bad0.10 Version: 0.10.3-3 Severity: serious Tags: security patch Hi, gst-plugins-bad0.10 is affected by CVE-2006-4192: buffer overflow in gst/modplug/libmodplug/sndfile.cpp. See GNOME #385788. Please let me know if I may upload the proposed NMU patch (attached). Bye, -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-3-686 Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) -- Loïc Minier <[EMAIL PROTECTED]>--- gst-plugins-bad0.10-0.10.3/debian/changelog +++ gst-plugins-bad0.10-0.10.3/debian/changelog @@ -1,3 +1,12 @@ +gst-plugins-bad0.10 (0.10.3-3.1) unstable; urgency=high + + * Non-maintainer upload. + * SECURITY: buffer overflow. + * Fix potential buffer overflow in gst/modplug/libmodplug/sndfile.cpp; + CVE-2006-4192; GNOME #385788; from upstream CVS / next upstream release. + + -- Loic Minier <[EMAIL PROTECTED]> Mon, 22 Jan 2007 16:05:35 +0100 + gst-plugins-bad0.10 (0.10.3-3) unstable; urgency=low * debian/rules: --- gst-plugins-bad0.10-0.10.3.orig/gst/modplug/libmodplug/sndfile.cpp +++ gst-plugins-bad0.10-0.10.3/gst/modplug/libmodplug/sndfile.cpp @@ -1081,7 +1081,7 @@ { UINT len = 0, mem = pIns->nLength+6; - if ((!pIns) || (pIns->nLength < 4) || (!lpMemFile)) return 0; + if ((!pIns) || ((int)pIns->nLength < 4) || (!lpMemFile)) return 0; if (pIns->nLength > MAX_SAMPLE_LENGTH) pIns->nLength = MAX_SAMPLE_LENGTH; pIns->uFlags &= ~(CHN_16BIT|CHN_STEREO); if (nFlags & RSF_16BIT)
--- End Message ---
--- Begin Message ---Source: gst-plugins-bad0.10 Source-Version: 0.10.3-3.1 We believe that the bug you reported is fixed in the latest version of gst-plugins-bad0.10, which is due to be installed in the Debian FTP archive: gst-plugins-bad0.10_0.10.3-3.1.diff.gz to pool/main/g/gst-plugins-bad0.10/gst-plugins-bad0.10_0.10.3-3.1.diff.gz gst-plugins-bad0.10_0.10.3-3.1.dsc to pool/main/g/gst-plugins-bad0.10/gst-plugins-bad0.10_0.10.3-3.1.dsc gstreamer0.10-plugins-bad_0.10.3-3.1_i386.deb to pool/main/g/gst-plugins-bad0.10/gstreamer0.10-plugins-bad_0.10.3-3.1_i386.deb A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [EMAIL PROTECTED], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Loic Minier <[EMAIL PROTECTED]> (supplier of updated gst-plugins-bad0.10 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [EMAIL PROTECTED]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Mon, 22 Jan 2007 16:05:35 +0100 Source: gst-plugins-bad0.10 Binary: gstreamer0.10-plugins-bad Architecture: source i386 Version: 0.10.3-3.1 Distribution: unstable Urgency: high Maintainer: Joe Wreschnig <[EMAIL PROTECTED]> Changed-By: Loic Minier <[EMAIL PROTECTED]> Description: gstreamer0.10-plugins-bad - various GStreamer plugins Closes: 407956 Changes: gst-plugins-bad0.10 (0.10.3-3.1) unstable; urgency=high . * Non-maintainer upload. * SECURITY: buffer overflow. * Fix potential buffer overflow in gst/modplug/libmodplug/sndfile.cpp; CVE-2006-4192; GNOME #385788; from upstream CVS / next upstream release; closes: #407956. Files: b57d41e5c7dac08941f88c220d365571 799 libs extra gst-plugins-bad0.10_0.10.3-3.1.dsc 93bf5c6fb079a6e9ca59468a15f3e2ee 9040 libs extra gst-plugins-bad0.10_0.10.3-3.1.diff.gz d628c133a64cb00437b44631f01dbf9b 543518 libs extra gstreamer0.10-plugins-bad_0.10.3-3.1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFFtw4G4VUX8isJIMARArp2AKCikGEgXLX7PyAhpOGmAD2/9wdxUwCeLO+a EgWMrxPKkzPS+ABVAy3GmE0= =UhfN -----END PGP SIGNATURE-----
--- End Message ---
