Format: 1.8 Date: Mon, 19 Jan 2009 22:05:24 +0100 Source: amarok Binary: amarok amarok-common amarok-engines amarok-engine-xine amarok-engine-yauap amarok-dbg Architecture: amd64_translations amd64 Version: 2:1.4.10-0ubuntu3.1 Distribution: intrepid Urgency: low Maintainer: Ubuntu/amd64 Build Daemon Changed-By: Harald Sitter Description: amarok - versatile and easy to use audio player for KDE amarok-common - architecture independent files for Amarok amarok-dbg - debugging symbols for Amarok amarok-engine-xine - xine engine for the Amarok audio player amarok-engine-yauap - Yauap engine for the Amarok audio player amarok-engines - output engines for the Amarok music player Launchpad-Bugs-Fixed: 318555 Changes: amarok (2:1.4.10-0ubuntu3.1) intrepid-security; urgency=low . * SECURITY UPDATE: integer overflows allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file (LP: #318555) - debian/patches/security_audible_tags.diff fix integer overflow while reading audible aa file tags. Based on upstream patch. - http://websvn.kde.org/?view=rev&revision=908415 - http://www.trapkit.de/advisories/TKADV2009-002.txt - CVE-2009-0135 - CVE-2009-0136 Checksums-Sha1: b8f63824ebdeaaa974653ede9d627b31d878c910 5396231 amarok_1.4.10-0ubuntu3.1_amd64_translations.tar.gz 1527ed53d75e85296b87fef5fe24b44971500737 2555918 amarok_1.4.10-0ubuntu3.1_amd64.deb ccea204edd7687e394b126195f9ed172519d728e 77300 amarok-engine-xine_1.4.10-0ubuntu3.1_amd64.deb 520b89d52d321cc3123c1105f22ee8faa5322f46 44786 amarok-engine-yauap_1.4.10-0ubuntu3.1_amd64.deb bdb1c4d490eda6c7d4f44506927314f0dfdb3384 11263374 amarok-dbg_1.4.10-0ubuntu3.1_amd64.deb Checksums-Sha256: 4b6c6ced1bdc9a43d5a4ada4a320a5e2f94c92c3ecea7fc3aabbc08dedffc4fb 5396231 amarok_1.4.10-0ubuntu3.1_amd64_translations.tar.gz 503ab672e8c4b181dccd4719666fc2f0f45deaac868aa8b0c17d51998136f981 2555918 amarok_1.4.10-0ubuntu3.1_amd64.deb d3151874064b693bc8966d80a5653ae0cf6521f4cdc209650625c12c48e4414b 77300 amarok-engine-xine_1.4.10-0ubuntu3.1_amd64.deb 91cb8e249c5e9580cdca513ad7970092866babb20468c83e6fcd5450c68bd239 44786 amarok-engine-yauap_1.4.10-0ubuntu3.1_amd64.deb 054a65831a6c6c036ee371d221f2ea279a6813a5b11589633dd3678c9200bc69 11263374 amarok-dbg_1.4.10-0ubuntu3.1_amd64.deb Files: 9bd013435001e003c6b03e2d8e9303f0 5396231 raw-translations - amarok_1.4.10-0ubuntu3.1_amd64_translations.tar.gz aa8ca60da603dde4ad17abf9a3f9413c 2555918 kde optional amarok_1.4.10-0ubuntu3.1_amd64.deb ec981ba68cfd40da2c0d1bcc732bb6ad 77300 kde optional amarok-engine-xine_1.4.10-0ubuntu3.1_amd64.deb 19864173750f5e0cfecb9cd0e5ecb93c 44786 kde optional amarok-engine-yauap_1.4.10-0ubuntu3.1_amd64.deb 3cd56f5c0137f627c7a1b6cf4da65b8f 11263374 kde extra amarok-dbg_1.4.10-0ubuntu3.1_amd64.deb Original-Maintainer: Modestas Vainius