Preparing a stable update for vorbis-tools

Petter Reinholdtsen pere at hungry.com
Thu Jun 9 08:26:01 UTC 2016


Hi.

I got tired of the open CVEs for vorbis-tools in stable, and would like
to upload a fix.  I've prepared a new branch debian/jessie fixing the
security issues (CVE-2014-9638, CVE-2014-9639, CVE-2015-6749) and the
vcut segfault issue (#818037).  Anyone else what something included
before I upload?  I checked with the security team if they want to do
the upload as a security update, and jcristau said no, so I will follow
the stable update route via the release managers.

The changes can be seen on
<URL: https://anonscm.debian.org/cgit/pkg-xiph/vorbis-tools.git/log/?h=debian/jessie >.

-- 
Happy hacking
Petter Reinholdtsen



More information about the pkg-xiph-maint mailing list