[vorbis-tools] 05/05: Update changelog for 1.4.0-1+deb7u1.

Petter Reinholdtsen pere at moszumanska.debian.org
Sun Jul 2 18:58:35 UTC 2017


This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch debian/wheezy
in repository vorbis-tools.

commit 68597cd7898bfd3ebb6d948b239b8824a003da64
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Sun Jul 2 20:58:24 2017 +0200

    Update changelog for 1.4.0-1+deb7u1.
---
 debian/changelog | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 676bf9d..a5495cb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,8 +2,12 @@ vorbis-tools (1.4.0-1+deb7u1) wheezy-security; urgency=medium
 
   * oggenc: Fix large alloca on bad AIFF input to oggenc (CVE-2015-6749)
     (Closes: 797461).
+  * oggenc: Validate count of channels in the header (CVE-2014-9638, CVE-2014-9639).
+    (Closes: 776086)
+  * Fix oggenc crash on closing raw input files by backporting r19117 from upstream
+    (CVE-2014-9640) (Closes: #771363).
 
- -- Petter Reinholdtsen <pere at debian.org>  Sun, 02 Jul 2017 09:44:59 +0200
+ -- Petter Reinholdtsen <pere at debian.org>  Sun, 02 Jul 2017 20:53:04 +0200
 
 vorbis-tools (1.4.0-1) unstable; urgency=low
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/vorbis-tools.git



More information about the pkg-xiph-commits mailing list