Format: 1.7 Date: Tue, 10 Mar 2009 08:43:20 -0400 Source: gst-plugins-good0.10 Binary: gstreamer0.10-plugins-good-doc gstreamer0.10-plugins-good gstreamer0.10-esd gstreamer0.10-plugins-good-dbg Architecture: ia64_translations ia64 Version: 0.10.6-0ubuntu4.2 Distribution: gutsy Urgency: low Maintainer: Ubuntu/ia64 Build Daemon Changed-By: Marc Deslauriers Description: gstreamer0.10-esd - GStreamer plugin for ESD gstreamer0.10-plugins-good - GStreamer plugins from the "good" set gstreamer0.10-plugins-good-dbg - GStreamer plugins from the "good" set Launchpad-Bugs-Fixed: 325261 325261 325261 Changes: gst-plugins-good0.10 (0.10.6-0ubuntu4.2) gutsy-security; urgency=low . * SECURITY UPDATE: Remote code execution via crafted Composition Time To Sample (ctts) atom data in quicktime demuxer (LP: #325261) - debian/patches/05_SECURITY_CVE-2009-0386-0387-0397.patch: make sure j never goes past stream->n_samples in gst/qtdemux/qtdemux.c. - CVE-2009-0386 * SECURITY UPDATE: Remote code execution via crafted Sync Sample (aka stss) atom data in quicktime demuxer (LP: #325261) - debian/patches/05_SECURITY_CVE-2009-0386-0387-0397.patch: make sure index is bigger than 0 and never goes past stream->n_samples in gst/qtdemux/qtdemux.c. Also, safely free stream->samples and stream->segments. - CVE-2009-0387 * SECURITY UPDATE: Remote code execution via crafted Time-to-sample (aka stts) atom data in quicktime demuxer (LP: #325261) - debian/patches/05_SECURITY_CVE-2009-0386-0387-0397.patch: make sure i and index never go past stream->n_samples in gst/qtdemux/qtdemux.c. - CVE-2009-0397 Files: a120215c991f7e74c6599c1c9e4c1524 34009 raw-translations - gst-plugins-good0.10_0.10.6-0ubuntu4.2_ia64_translations.tar.gz 36a14b5e149140672afb33c50b9d1ba6 43714 libs optional gstreamer0.10-esd_0.10.6-0ubuntu4.2_ia64.deb 94b879d3f755981e0cec747469bb46fb 1252146 libs optional gstreamer0.10-plugins-good_0.10.6-0ubuntu4.2_ia64.deb 228094b21cb8c79a26258658aeab04df 2235730 libdevel extra gstreamer0.10-plugins-good-dbg_0.10.6-0ubuntu4.2_ia64.deb Original-Maintainer: Maintainers of GStreamer packages