debian-changes-digest Digest V2007 #90

From: <debian-changes-digest-request(at)lists.debian.org>
Date: Thu Aug 16 2007 - 16:10:50 EDT

Content-Type: text/plain

debian-changes-digest Digest Volume 2007 : Issue 90

Today's Topics:

  Accepted kdegraphics 4:3.5.5-3etch1   [ Moritz Muehlenhoff  ]
  Accepted wireshark 0.99.4-5.etch.0 (  [ Frederic Peters  ]
  Accepted hiki 0.8.6-1etch1 (source a  [ Steve Kemp  ]
  Accepted iceweasel 2.0.0.6-0etch1 (s  [ Mike Hommey  ]
  Accepted tcpdump 3.9.5-2etch1 (sourc  [ Moritz Muehlenhoff  ]

Date: Thu, 16 Aug 2007 19:58:42 +0000
From: Moritz Muehlenhoff <jmm@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted kdegraphics 4:3.5.5-3etch1 (source i386 all) Message-Id: <E1ILlUQ-0008Nw-Bg@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Fri, 3 Aug 2007 18:37:38 +0200
Source: kdegraphics
Binary: kdegraphics-kfile-plugins ksnapshot kviewshell kghostview libkscan-dev kruler kcoloredit kamera kdegraphics-dev libkscan1 kdegraphics-dbg kview kdegraphics-doc-html kpdf ksvg kdvi kiconedit kfax kfaxview kuickshow kooka kdegraphics kolourpaint kmrml kgamma kpovmodeler Architecture: source i386 all
Version: 4:3.5.5-3etch1
Distribution: stable-security
Urgency: high
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> Changed-By: Moritz Muehlenhoff <jmm@debian.org> Description:
 kamera - digital camera io_slave for Konqueror  kcoloredit - a color palette editor and color picker for KDE  kdegraphics - graphics apps from the official KDE release

 kdegraphics-dbg - debugging symbols for kdegraphics
 kdegraphics-dev - development files for the KDE graphics module
 kdegraphics-doc-html - KDE graphics documentation in HTML format
 kdegraphics-kfile-plugins - KDE metainfo plugins for graphic files
 kdvi       - dvi viewer for KDE
 kfax       - G3/G4 fax viewer for KDE
 kfaxview   - G3/G4 fax viewer for KDE using kviewshell
 kgamma     - gamma correction module for the KDE Control Center
 kghostview - PostScript viewer for KDE
 kiconedit  - an icon editor for KDE
 kmrml      - a Konqueror plugin for searching pictures
 kolourpaint - a simple paint program for KDE
 kooka      - scanner program for KDE
 kpdf       - PDF viewer for KDE
 kpovmodeler - a graphical editor for povray scenes
 kruler     - a screen ruler and color measurement tool for KDE
 ksnapshot  - screenshot utility for KDE
 ksvg       - SVG viewer for KDE
 kuickshow  - KDE image/slideshow viewer
 kview      - simple image viewer/converter for KDE

 kviewshell - generic framework for viewer applications in KDE  libkscan-dev - development files for the KDE scanner library  libkscan1 - scanner library for KDE
Changes:
 kdegraphics (4:3.5.5-3etch1) stable-security; urgency=high  .

• Fix integer overflow in stream predictor Files: 2785fd921cf1304269dbdc04b960f4b7 1568 kde optional kdegraphics_3.5.5-3etch1.dsc 944e16dde53ffdb8c25a90d951a9d223 9012930 kde optional kdegraphics_3.5.5.orig.tar.gz a93d327179dc4d0c751d0807ab56375e 422516 kde optional kdegraphics_3.5.5-3etch1.diff.gz db7b748582aaf02d612101d46fc61b0f 19256 kde optional kdegraphics_3.5.5-3etch1_all.deb 780d2de7c35c87bb3d6a1dc2b9dc6dd2 156450 doc optional kdegraphics-doc-html_3.5.5-3etch1_all.deb 02f5d47a1114b66dcfcaa11bba7f6e38 90018 graphics optional kamera_3.5.5-3etch1_i386.deb c5a038f90093807d9e3012a6d897c5c2 103532 graphics optional kcoloredit_3.5.5-3etch1_i386.deb 1f57145904891c7cba5fb83d2f24b1ff 101738 devel optional kdegraphics-dev_3.5.5-3etch1_i386.deb 03d518356e8b128f7f17bf162904e9b5 254948 kde optional kdegraphics-kfile-plugins_3.5.5-3etch1_i386.deb 52cfbd4b50deed58ef46e1c5db5a3214 529796 graphics optional kdvi_3.5.5-3etch1_i386.deb 7e901b28b20026b97f16994a99f9ec65 145540 graphics optional kfax_3.5.5-3etch1_i386.deb c0bffc933cc33bc7b085db4096e04ced 108012 graphics optional kfaxview_3.5.5-3etch1_i386.deb fa3f1b9a49ee8f03f3c7e79754675d29 77810 graphics optional kgamma_3.5.5-3etch1_i386.deb 68bc63be20c6584cf78a9c7c9307c34c 234034 graphics optional kghostview_3.5.5-3etch1_i386.deb f5d3d35434a773b003129920782b6a37 176972 graphics optional kiconedit_3.5.5-3etch1_i386.deb 5a2ba881ea26fccbe29469cb875ed183 222192 kde optional kmrml_3.5.5-3etch1_i386.deb aaff4c1f4953906d16bdf79afc6da66f 1073750 graphics optional kolourpaint_3.5.5-3etch1_i386.deb 5bcd7b77372f689fb4b997c1d2f88427 757192 graphics optional kooka_3.5.5-3etch1_i386.deb 0516014a3cd24649f276de977e26b54a 741202 graphics optional kpdf_3.5.5-3etch1_i386.deb 842954d1e20e291e98f0ac43cd82694a 2227756 graphics optional kpovmodeler_3.5.5-3etch1_i386.deb f08d7ce2c22469e2607dceede057bb64 67282 graphics optional kruler_3.5.5-3etch1_i386.deb d649279a0ad8846fca8fb92cf379fdeb 172914 graphics optional ksnapshot_3.5.5-3etch1_i386.deb 59dfbb1614606be739702a30f0cc75ed 1218320 graphics optional ksvg_3.5.5-3etch1_i386.deb c20dabf40b4ced73bb41c380aa069a51 491444 graphics optional kuickshow_3.5.5-3etch1_i386.deb 7a31107245a4cd7ccf7c47fbf7dbedc7 391860 graphics optional kview_3.5.5-3etch1_i386.deb 280d6be6b02be0c20d40a1cb660b20ea 785164 graphics optional kviewshell_3.5.5-3etch1_i386.deb 87d4bd5ebcf5fc57d285809955e283a4 19084 libdevel optional libkscan-dev_3.5.5-3etch1_i386.deb e7333c55e20ea6751a27e246313ffd09 135066 libs optional libkscan1_3.5.5-3etch1_i386.deb 102495d11708418fa06e80d64c57b540 25358534 libdevel extra kdegraphics-dbg_3.5.5-3etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Signed by Ana Guerrero

iD8DBQFGvDrnn3j4POjENGERAut3AKCCbM+xFQRbLPpDIqiF96faLnpVGgCdEXuF 6ziSJBAjYrX/q+NC6u6tPp0=
=7Yhq
-----END PGP SIGNATURE-----
Accepted:
kamera_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kamera_3.5.5-3etch1_i386.deb kcoloredit_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kcoloredit_3.5.5-3etch1_i386.deb kdegraphics-dbg_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kdegraphics-dbg_3.5.5-3etch1_i386.deb kdegraphics-dev_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kdegraphics-dev_3.5.5-3etch1_i386.deb kdegraphics-doc-html_3.5.5-3etch1_all.deb   to pool/main/k/kdegraphics/kdegraphics-doc-html_3.5.5-3etch1_all.deb kdegraphics-kfile-plugins_3.5.5-3etch1_i386.deb   to pool/main/k/kdegraphics/kdegraphics-kfile-plugins_3.5.5-3etch1_i386.deb kdegraphics_3.5.5-3etch1.diff.gz
  to pool/main/k/kdegraphics/kdegraphics_3.5.5-3etch1.diff.gz kdegraphics_3.5.5-3etch1.dsc
  to pool/main/k/kdegraphics/kdegraphics_3.5.5-3etch1.dsc kdegraphics_3.5.5-3etch1_all.deb
  to pool/main/k/kdegraphics/kdegraphics_3.5.5-3etch1_all.deb kdvi_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kdvi_3.5.5-3etch1_i386.deb kfax_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kfax_3.5.5-3etch1_i386.deb kfaxview_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kfaxview_3.5.5-3etch1_i386.deb kgamma_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kgamma_3.5.5-3etch1_i386.deb kghostview_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kghostview_3.5.5-3etch1_i386.deb kiconedit_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kiconedit_3.5.5-3etch1_i386.deb kmrml_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kmrml_3.5.5-3etch1_i386.deb kolourpaint_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kolourpaint_3.5.5-3etch1_i386.deb kooka_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kooka_3.5.5-3etch1_i386.deb kpdf_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kpdf_3.5.5-3etch1_i386.deb kpovmodeler_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kpovmodeler_3.5.5-3etch1_i386.deb kruler_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kruler_3.5.5-3etch1_i386.deb ksnapshot_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/ksnapshot_3.5.5-3etch1_i386.deb ksvg_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/ksvg_3.5.5-3etch1_i386.deb kuickshow_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kuickshow_3.5.5-3etch1_i386.deb kview_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kview_3.5.5-3etch1_i386.deb kviewshell_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/kviewshell_3.5.5-3etch1_i386.deb libkscan-dev_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/libkscan-dev_3.5.5-3etch1_i386.deb libkscan1_3.5.5-3etch1_i386.deb
  to pool/main/k/kdegraphics/libkscan1_3.5.5-3etch1_i386.deb

Date: Thu, 16 Aug 2007 19:59:54 +0000
From: Frederic Peters <fpeters@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted wireshark 0.99.4-5.etch.0 (source i386) Message-Id: <E1ILlVa-0008Th-NS@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Sat, 23 Jun 2007 12:43:19 +0200
Source: wireshark
Binary: wireshark ethereal-dev wireshark-common tshark wireshark-dev ethereal ethereal-common tethereal Architecture: source i386
Version: 0.99.4-5.etch.0
Distribution: stable-security
Urgency: high
Maintainer: Frederic Peters <fpeters@debian.org> Changed-By: Frederic Peters <fpeters@debian.org> Description:
 ethereal - dummy upgrade package for ethereal -> wireshark  ethereal-common - dummy upgrade package for ethereal -> wireshark  ethereal-dev - dummy upgrade package for ethereal -> wireshark

 tethereal  - dummy upgrade package for ethereal -> wireshark
 tshark     - network traffic analyzer (console)
 wireshark  - network traffic analyzer

 wireshark-common - network traffic analyser (common files)  wireshark-dev - network traffic analyser (development tools) Changes:
 wireshark (0.99.4-5.etch.0) stable-security; urgency=high  .

• Backported security fixes from 0.99.6pre1
  • could crash while reading iSeries capture files (bug 1415)
  • could loop excessively while reading a malformed SSL packet (bug 1582)
  • DHCP/BOOTP dissector was susceptible to an off-by-one error (bug 1416)
  • could loop excessively while reading a malformed MMS packet (bug 1382)
  • see http://www.wireshark.org/security/wnpa-sec-2007-02.html Files: 18ea1bc407fe203089596126d9429c64 1066 net optional wireshark_0.99.4-5.etch.0.dsc 2556a31d0d770dd1990bd67b98bd2f9b 13306790 net optional wireshark_0.99.4.orig.tar.gz 82b8a22a1cc100e5649f278cabbcce4f 40945 net optional wireshark_0.99.4-5.etch.0.diff.gz 72ccda66968a36b061102ce51b3de138 7498442 net optional wireshark-common_0.99.4-5.etch.0_i386.deb 7294e7aa0e1b8fa193c94b6e79d3bd97 564422 net optional wireshark_0.99.4-5.etch.0_i386.deb 73e0509bd61b62f01d3552f36c1f34f4 102014 net optional tshark_0.99.4-5.etch.0_i386.deb 0d334a446ed7fb818efa775d26ea7b39 182474 devel optional wireshark-dev_0.99.4-5.etch.0_i386.deb 5979a9752e877a8755867454757c1fcd 22682 net optional ethereal-common_0.99.4-5.etch.0_i386.deb 9f49b78cf81fa447e8b9beff925beb51 22330 devel optional ethereal-dev_0.99.4-5.etch.0_i386.deb 99055a9aaf39d425e31ccd68804dae8e 22314 net optional ethereal_0.99.4-5.etch.0_i386.deb 204947893bde8c2b5a79855c29a622bb 22324 net optional tethereal_0.99.4-5.etch.0_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGfok4oR3LsWeD7V4RAggXAJ4gNga1OIWiuX3an7BWLQjx7mCr9QCfUelA Zf53UE8+Iq8dhmf8AsTiN0k=
=fxJl
-----END PGP SIGNATURE-----
Accepted:
ethereal-common_0.99.4-5.etch.0_i386.deb   to pool/main/w/wireshark/ethereal-common_0.99.4-5.etch.0_i386.deb ethereal-dev_0.99.4-5.etch.0_i386.deb
  to pool/main/w/wireshark/ethereal-dev_0.99.4-5.etch.0_i386.deb ethereal_0.99.4-5.etch.0_i386.deb
  to pool/main/w/wireshark/ethereal_0.99.4-5.etch.0_i386.deb tethereal_0.99.4-5.etch.0_i386.deb
  to pool/main/w/wireshark/tethereal_0.99.4-5.etch.0_i386.deb tshark_0.99.4-5.etch.0_i386.deb
  to pool/main/w/wireshark/tshark_0.99.4-5.etch.0_i386.deb wireshark-common_0.99.4-5.etch.0_i386.deb   to pool/main/w/wireshark/wireshark-common_0.99.4-5.etch.0_i386.deb wireshark-dev_0.99.4-5.etch.0_i386.deb
  to pool/main/w/wireshark/wireshark-dev_0.99.4-5.etch.0_i386.deb wireshark_0.99.4-5.etch.0.diff.gz
  to pool/main/w/wireshark/wireshark_0.99.4-5.etch.0.diff.gz wireshark_0.99.4-5.etch.0.dsc
  to pool/main/w/wireshark/wireshark_0.99.4-5.etch.0.dsc wireshark_0.99.4-5.etch.0_i386.deb
  to pool/main/w/wireshark/wireshark_0.99.4-5.etch.0_i386.deb

Date: Thu, 16 Aug 2007 19:59:44 +0000
From: Sam Hocevar (Debian packages) <sam+deb@zoy.org> To: debian-changes@lists.debian.org
Subject: Accepted vlc 0.8.6-svn20061012.debian-5etch1 (source i386 all) Message-Id: <E1ILlVQ-0008TH-0l@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Wed, 20 Jun 2007 20:53:40 +0200
Source: vlc
Binary: wxvlc vlc-plugin-sdl vlc-plugin-ggi vlc-plugin-alsa vlc-plugin-glide vlc-plugin-esd mozilla-plugin-vlc vlc libvlc0 vlc-plugin-arts vlc-nox vlc-plugin-svgalib libvlc0-dev Architecture: source i386 all
Version: 0.8.6-svn20061012.debian-5etch1 Distribution: stable-security
Urgency: high
Maintainer: Sam Hocevar (Debian packages) <sam+deb@zoy.org> Changed-By: Sam Hocevar (Debian packages) <sam+deb@zoy.org> Description:
 libvlc0 - multimedia player and streamer library  libvlc0-dev - development files for VLC  mozilla-plugin-vlc - multimedia plugin for web browsers based on VLC  vlc - multimedia player and streamer

 vlc-nox    - multimedia player and streamer (without X support)
 vlc-plugin-alsa - dummy transitional package
Can we help you?
In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software:
Learn more about Pantek's Technical Support offerings
Place an order for 24/7/365 Technical Support here
Learn more about Pantek, who we are, and what we do
Chat with a Live Operator
Related lists.debian.org Links
debian-announce
debian-apache
debian-arm-changes
debian-beowulf
debian-boot
debian-cd
debian-cd-vendors
debian-changes
debian-changes-digest
debian-isp
debian-kde
debian-laptop
debian-mirrors-announce
debian-news
debian-security
debian-security-announce
debian-testing
debian-user
debian-user-digest
Request more information about Pantek
 vlc-plugin-arts - aRts audio output plugin for VLC
 vlc-plugin-esd - Esound audio output plugin for VLC
 vlc-plugin-ggi - GGI video output plugin for VLC
 vlc-plugin-glide - Glide video output plugin for VLC
 vlc-plugin-sdl - SDL video and audio output plugin for VLC
 vlc-plugin-svgalib - SVGAlib video output plugin for VLC
 wxvlc      - dummy transitional package

Closes: 429726
Changes:
 vlc (0.8.6-svn20061012.debian-5etch1) stable-security; urgency=high  .

• patch-formatstring-0.8.6debian-0.8.6c.diff: + Fix format string vulnerabilities (VideoLAN-SA-0702) (Closes: #429726).
• patch-overflows-0.8.6debian-0.8.6c.diff: + Fix integer and buffer overflows.
• patch-memleak-0.8.6debian-0.8.6c.diff:
• patch-missingchecks-0.8.6debian-0.8.6c.diff:
• patch-uninitialised-0.8.6debian-0.8.6c.diff: + Fix memory leaks, missing checks and uninitialised variables that can lead to denials of service. Files: a78b0e31b43f1d6519485222254c8591 2608 graphics optional vlc_0.8.6-svn20061012.debian-5etch1.dsc 30c18a2fdc4105606033ff6e6aeab81c 15168393 graphics optional vlc_0.8.6-svn20061012.debian.orig.tar.gz d3465014c27a536eb1e0e055e381e378 2376828 graphics optional vlc_0.8.6-svn20061012.debian-5etch1.diff.gz 0100725dbe353382fae899953a44bd90 782 graphics optional vlc-plugin-alsa_0.8.6-svn20061012.debian-5etch1_all.deb 5e3b682a006ae7aab3a2c762e7c3f5e5 774 graphics optional wxvlc_0.8.6-svn20061012.debian-5etch1_all.deb 3ea8114ac3cef6a979c0444afad72331 1137646 graphics optional vlc_0.8.6-svn20061012.debian-5etch1_i386.deb 325759b017bc105ebc8121d4f51f77f5 4628428 net optional vlc-nox_0.8.6-svn20061012.debian-5etch1_i386.deb a480bbcf93fd8b5661cf103326d447b5 957680 libs optional libvlc0_0.8.6-svn20061012.debian-5etch1_i386.deb 953afed452ce74818b60fe123e6b39cc 20192 libdevel optional libvlc0-dev_0.8.6-svn20061012.debian-5etch1_i386.deb eee461e1a79b5b509dd0e3fe8d87d358 4816 graphics optional vlc-plugin-esd_0.8.6-svn20061012.debian-5etch1_i386.deb 9f2d3b61e96095f5ea07d7541b281149 10712 graphics optional vlc-plugin-sdl_0.8.6-svn20061012.debian-5etch1_i386.deb 9e9b6a49d9c311ac9062752744df9953 5838 graphics optional vlc-plugin-ggi_0.8.6-svn20061012.debian-5etch1_i386.deb 2806e46188b5d3a86996b66adac01d19 4134 graphics optional vlc-plugin-glide_0.8.6-svn20061012.debian-5etch1_i386.deb 847a4204b2a8e03e9ffb495ddbe09f74 4104 graphics optional vlc-plugin-arts_0.8.6-svn20061012.debian-5etch1_i386.deb 72db66b31b1105b5e30ccbfb11be1293 36182 graphics optional mozilla-plugin-vlc_0.8.6-svn20061012.debian-5etch1_i386.deb 044d220ad46949a671788d2ef6112cdc 4532 graphics optional vlc-plugin-svgalib_0.8.6-svn20061012.debian-5etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGevX7Xm3vHE4uyloRAivcAJ4vxpCxSbZGdH45u7iSRH6bY5HpXACgh0j3 Lm7FgiFdmw6EwSDaJO+JsRw=
=fjxE
-----END PGP SIGNATURE-----
Accepted:
libvlc0-dev_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/libvlc0-dev_0.8.6-svn20061012.debian-5etch1_i386.deb libvlc0_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/libvlc0_0.8.6-svn20061012.debian-5etch1_i386.deb mozilla-plugin-vlc_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/mozilla-plugin-vlc_0.8.6-svn20061012.debian-5etch1_i386.deb vlc-nox_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/vlc-nox_0.8.6-svn20061012.debian-5etch1_i386.deb vlc-plugin-alsa_0.8.6-svn20061012.debian-5etch1_all.deb   to pool/main/v/vlc/vlc-plugin-alsa_0.8.6-svn20061012.debian-5etch1_all.deb vlc-plugin-arts_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/vlc-plugin-arts_0.8.6-svn20061012.debian-5etch1_i386.deb vlc-plugin-esd_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/vlc-plugin-esd_0.8.6-svn20061012.debian-5etch1_i386.deb vlc-plugin-ggi_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/vlc-plugin-ggi_0.8.6-svn20061012.debian-5etch1_i386.deb vlc-plugin-glide_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/vlc-plugin-glide_0.8.6-svn20061012.debian-5etch1_i386.deb vlc-plugin-sdl_0.8.6-svn20061012.debian-5etch1_i386.deb

  to pool/main/v/vlc/vlc-plugin-sdl_0.8.6-svn20061012.debian-5etch1_i386.deb
vlc-plugin-svgalib_0.8.6-svn20061012.debian-5etch1_i386.deb
  to pool/main/v/vlc/vlc-plugin-svgalib_0.8.6-svn20061012.debian-5etch1_i386.deb

vlc_0.8.6-svn20061012.debian-5etch1.diff.gz   to pool/main/v/vlc/vlc_0.8.6-svn20061012.debian-5etch1.diff.gz vlc_0.8.6-svn20061012.debian-5etch1.dsc
  to pool/main/v/vlc/vlc_0.8.6-svn20061012.debian-5etch1.dsc vlc_0.8.6-svn20061012.debian-5etch1_i386.deb   to pool/main/v/vlc/vlc_0.8.6-svn20061012.debian-5etch1_i386.deb wxvlc_0.8.6-svn20061012.debian-5etch1_all.deb   to pool/main/v/vlc/wxvlc_0.8.6-svn20061012.debian-5etch1_all.deb

Date: Thu, 16 Aug 2007 19:59:03 +0000
From: Russ Allbery <rra@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted krb5 1.4.4-7etch2 (source i386 all) Message-Id: <E1ILlUl-0008P9-CX@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Wed, 13 Jun 2007 13:31:23 -0700
Source: krb5
Binary: krb5-doc libkrb5-dev krb5-rsh-server krb5-user krb5-ftpd libkadm55 libkrb53 krb5-clients krb5-telnetd krb5-kdc krb5-admin-server libkrb5-dbg Architecture: source i386 all
Version: 1.4.4-7etch2
Distribution: stable-security
Urgency: emergency
Maintainer: Sam Hartman <hartmans@debian.org> Changed-By: Russ Allbery <rra@debian.org> Description:

 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-clients - Secure replacements for ftp, telnet and rsh using MIT Kerberos
 krb5-doc   - Documentation for MIT Kerberos
 krb5-ftpd  - Secure FTP server supporting MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-rsh-server - Secure replacements for rshd and rlogind using MIT Kerberos
 krb5-telnetd - Secure telnet server supporting MIT Kerberos
 krb5-user  - Basic programs to authenticate using MIT Kerberos

 libkadm55 - MIT Kerberos administration runtime libraries  libkrb5-dbg - Debugging files for MIT Kerberos  libkrb5-dev - Headers and development libraries for MIT Kerberos  libkrb53 - MIT Kerberos runtime libraries Changes:
 krb5 (1.4.4-7etch2) stable-security; urgency=emergency  .

• MIT-SA-2007-4: The kadmin RPC library can free an uninitialized pointer or write past the end of a stack buffer. This may lead to execution of arbitrary code. (CVE-2007-2442, CVE-2007-2443)
• MIT-SA-2007-5: kadmind is vulnerable to a stack buffer overflow that may lead to execution of arbitrary code. (CVE-2007-2798) Files: e3cd71d7eabf49400b3d8a1d95211f4f 876 net standard krb5_1.4.4-7etch2.dsc a675e5953bb8a29b5c6eb6f4ab0bb32a 11017910 net standard krb5_1.4.4.orig.tar.gz e75d8f6c78b237293d7304a3841555ae 1586282 net standard krb5_1.4.4-7etch2.diff.gz 3d366afb24799688b4fabd7ecc5e007a 1806006 doc optional krb5-doc_1.4.4-7etch2_all.deb 95173cebbb49797f2bde06a5a3736e46 173712 libs optional libkadm55_1.4.4-7etch2_i386.deb 47a0ae9a146e6da1dd86e95a04117024 408042 libs standard libkrb53_1.4.4-7etch2_i386.deb 808e5c1834fe320210b6a7369df44b36 123894 net optional krb5-user_1.4.4-7etch2_i386.deb 87ea7485f3693951fcabd3f873a000d2 196160 net optional krb5-clients_1.4.4-7etch2_i386.deb e081e7fb29751bd212b567327ca6fb37 79976 net optional krb5-rsh-server_1.4.4-7etch2_i386.deb ecab97060f8c6900a5d8bc8e9c6e896e 57706 net extra krb5-ftpd_1.4.4-7etch2_i386.deb dfde91574f4cfb577d6a991cec074c79 62098 net extra krb5-telnetd_1.4.4-7etch2_i386.deb c76e322bb6167e1906555527237496cd 132882 net optional krb5-kdc_1.4.4-7etch2_i386.deb 5154337142097dce09983caf06d5f56b 78266 net optional krb5-admin-server_1.4.4-7etch2_i386.deb d539aa8fcabac7a48c90599eb91701f1 679788 libdevel extra libkrb5-dev_1.4.4-7etch2_i386.deb afe34de0a092d270f109baa7ef5084e5 1037402 libdevel extra libkrb5-dbg_1.4.4-7etch2_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGgTfA+YXjQAr8dHYRAnNEAKCUPt+gGyZMqPkJG6tA/BZFR8ycsQCfQxiy 36gVGvEnRGY2bBW77QvS1Y4=
=uOeq
-----END PGP SIGNATURE-----
Accepted:
krb5-admin-server_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-admin-server_1.4.4-7etch2_i386.deb krb5-clients_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-clients_1.4.4-7etch2_i386.deb krb5-doc_1.4.4-7etch2_all.deb
  to pool/main/k/krb5/krb5-doc_1.4.4-7etch2_all.deb krb5-ftpd_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-ftpd_1.4.4-7etch2_i386.deb krb5-kdc_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-kdc_1.4.4-7etch2_i386.deb krb5-rsh-server_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-rsh-server_1.4.4-7etch2_i386.deb krb5-telnetd_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-telnetd_1.4.4-7etch2_i386.deb krb5-user_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/krb5-user_1.4.4-7etch2_i386.deb krb5_1.4.4-7etch2.diff.gz
  to pool/main/k/krb5/krb5_1.4.4-7etch2.diff.gz krb5_1.4.4-7etch2.dsc
  to pool/main/k/krb5/krb5_1.4.4-7etch2.dsc libkadm55_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/libkadm55_1.4.4-7etch2_i386.deb libkrb5-dbg_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/libkrb5-dbg_1.4.4-7etch2_i386.deb libkrb5-dev_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/libkrb5-dev_1.4.4-7etch2_i386.deb libkrb53_1.4.4-7etch2_i386.deb
  to pool/main/k/krb5/libkrb53_1.4.4-7etch2_i386.deb

Date: Thu, 16 Aug 2007 19:57:03 +0000
From: Steve Kemp <skx@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted hiki 0.8.6-1etch1 (source all) Message-Id: <E1ILlSp-0008ID-Mu@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Wed, 27 Jun 2007 12:54:12 +0000
Source: hiki
Binary: hiki
Architecture: source all
Version: 0.8.6-1etch1
Distribution: stable-security
Urgency: high
Maintainer: Taku YASUI <tach@debian.or.jp> Changed-By: Steve Kemp <skx@debian.org>
Description:
 hiki - Wiki Engine written in Ruby Changes:
 hiki (0.8.6-1etch1) stable-security; urgency=high  .

• Non-maintainer upload by The Security Team.
• Fixed unsafe use of session variable. [CVE-2007-2836] Files: 22358a8449ae12c19fe6a80f8607a82f 571 web optional hiki_0.8.6-1etch1.dsc 990212929cabf29e72df10a5b76ff27d 244885 web optional hiki_0.8.6.orig.tar.gz b57f6debe38f903c7615d738f5030060 5418 web optional hiki_0.8.6-1etch1.diff.gz fdbc68fca2b4939ceace21f282b0c2fb 228092 web optional hiki_0.8.6-1etch1_all.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGglCQwM/Gs81MDZ0RAlz2AJ9WKqy3I3OAa4FiKZCjGd4Q7ymOBQCgp4ar UXwgSO+5CyAuwRq7jV/QYXE=
=brzl
-----END PGP SIGNATURE-----
Accepted:
hiki_0.8.6-1etch1.diff.gz
  to pool/main/h/hiki/hiki_0.8.6-1etch1.diff.gz hiki_0.8.6-1etch1.dsc
  to pool/main/h/hiki/hiki_0.8.6-1etch1.dsc hiki_0.8.6-1etch1_all.deb
  to pool/main/h/hiki/hiki_0.8.6-1etch1_all.deb

Date: Thu, 16 Aug 2007 19:58:15 +0000
From: Mike Hommey <glandium@debian.org>
To: debian-changes@lists.debian.org
Subject: Accepted iceweasel 2.0.0.6-0etch1 (source all i386) Message-Id: <E1ILlTz-0008M4-22@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Wed, 01 Aug 2007 07:50:38 +0200
Source: iceweasel
Binary: firefox-dom-inspector mozilla-firefox iceweasel-gnome-support iceweasel mozilla-firefox-dom-inspector iceweasel-dbg firefox-gnome-support iceweasel-dom-inspector mozilla-firefox-gnome-support firefox Architecture: source all i386
Version: 2.0.0.6-0etch1
Distribution: stable-security
Urgency: critical
Maintainer: Eric Dorland <eric@debian.org> Changed-By: Mike Hommey <glandium@debian.org> Description:
 firefox - Transition package for iceweasel rename  firefox-dom-inspector - Transition package for iceweasel rename  firefox-gnome-support - Transition package for iceweasel rename  iceweasel - lightweight web browser based on Mozilla

 iceweasel-dbg - debugging symbols for iceweasel
 iceweasel-dom-inspector - tool for inspecting the DOM of pages in Iceweasel
 iceweasel-gnome-support - Support for Gnome in Iceweasel
 mozilla-firefox - Transition package for iceweasel rename

 mozilla-firefox-dom-inspector - Transition package for iceweasel rename  mozilla-firefox-gnome-support - Transition package for iceweasel rename Changes:
 iceweasel (2.0.0.6-0etch1) stable-security; urgency=critical  .

• New security/stability upstream release (v2.0.0.6)
• MFSA 2007-26 aka CVE-2007-3844
• MFSA 2007-27 aka CVE-2007-3845
• debian/remove.nonfree: Also remove DLLs we don't have source for. Files: 6c5645d987f92f3ca740f6f8b32e629e 1286 web optional iceweasel_2.0.0.6-0etch1.dsc 7926906f722ce63f1dc265584d4eedbb 43921246 web optional iceweasel_2.0.0.6.orig.tar.gz 9eec31b6ee5e26f7ab5c821276c7b07f 185637 web optional iceweasel_2.0.0.6-0etch1.diff.gz 9794664bc04f4fdf58dc495c08e963f0 235008 web optional iceweasel-dom-inspector_2.0.0.6-0etch1_all.deb 91dcdf7f9efd927051f9c264a32ab53e 54420 web optional mozilla-firefox_2.0.0.6-0etch1_all.deb 70bd9857cefdb0201189dfbc5195c374 53624 web optional mozilla-firefox-dom-inspector_2.0.0.6-0etch1_all.deb 8a69ff7e8a0188ff7a3b49cd675c67c2 53622 gnome optional mozilla-firefox-gnome-support_2.0.0.6-0etch1_all.deb ab7dc7ed35b05c831a6a85c5c9bbd089 53898 web optional firefox_2.0.0.6-0etch1_all.deb 2ad158343a2ca999ad67c1e887e0f9a4 53778 web optional firefox-dom-inspector_2.0.0.6-0etch1_all.deb 864665a331bb50b7f0b3e4710712fd4b 53742 gnome optional firefox-gnome-support_2.0.0.6-0etch1_all.deb 772d097f5b7092e6c6a69e6641a5934a 9083732 web optional iceweasel_2.0.0.6-0etch1_i386.deb 0d626e54ef0e4478cccda71c5f9b110b 81472 gnome optional iceweasel-gnome-support_2.0.0.6-0etch1_i386.deb 77d7a1a636b9887249169b2eb6003b94 49398796 devel extra iceweasel-dbg_2.0.0.6-0etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGsEdc3kvaLFT9KlgRAlH7AJ0YBI2SGK5SOYUBERb/i8nVeTSizACbB3gR B8TmZihjMp37loOYDo2O19o=
=3z3P
-----END PGP SIGNATURE-----
Accepted:
firefox-dom-inspector_2.0.0.6-0etch1_all.deb   to pool/main/i/iceweasel/firefox-dom-inspector_2.0.0.6-0etch1_all.deb firefox-gnome-support_2.0.0.6-0etch1_all.deb   to pool/main/i/iceweasel/firefox-gnome-support_2.0.0.6-0etch1_all.deb firefox_2.0.0.6-0etch1_all.deb
  to pool/main/i/iceweasel/firefox_2.0.0.6-0etch1_all.deb iceweasel-dbg_2.0.0.6-0etch1_i386.deb
  to pool/main/i/iceweasel/iceweasel-dbg_2.0.0.6-0etch1_i386.deb iceweasel-dom-inspector_2.0.0.6-0etch1_all.deb   to pool/main/i/iceweasel/iceweasel-dom-inspector_2.0.0.6-0etch1_all.deb iceweasel-gnome-support_2.0.0.6-0etch1_i386.deb   to pool/main/i/iceweasel/iceweasel-gnome-support_2.0.0.6-0etch1_i386.deb iceweasel_2.0.0.6-0etch1.diff.gz
  to pool/main/i/iceweasel/iceweasel_2.0.0.6-0etch1.diff.gz iceweasel_2.0.0.6-0etch1.dsc
  to pool/main/i/iceweasel/iceweasel_2.0.0.6-0etch1.dsc iceweasel_2.0.0.6-0etch1_i386.deb
  to pool/main/i/iceweasel/iceweasel_2.0.0.6-0etch1_i386.deb mozilla-firefox-dom-inspector_2.0.0.6-0etch1_all.deb   to pool/main/i/iceweasel/mozilla-firefox-dom-inspector_2.0.0.6-0etch1_all.deb mozilla-firefox-gnome-support_2.0.0.6-0etch1_all.deb   to pool/main/i/iceweasel/mozilla-firefox-gnome-support_2.0.0.6-0etch1_all.deb mozilla-firefox_2.0.0.6-0etch1_all.deb
  to pool/main/i/iceweasel/mozilla-firefox_2.0.0.6-0etch1_all.deb

Date: Thu, 16 Aug 2007 19:59:33 +0000
From: Moritz Muehlenhoff <jmm@debian.org> To: debian-changes@lists.debian.org
Subject: Accepted tcpdump 3.9.5-2etch1 (source i386) Message-Id: <E1ILlVF-0008S0-NV@ries.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Format: 1.7
Date: Tue, 7 Aug 2007 23:55:33 +0200
Source: tcpdump
Binary: tcpdump
Architecture: source i386
Version: 3.9.5-2etch1
Distribution: stable-security
Urgency: high
Maintainer: Romain Francoise <rfrancoise@debian.org> Changed-By: Moritz Muehlenhoff <jmm@debian.org> Description:
 tcpdump - A powerful tool for network monitoring and data acquisition Changes:
 tcpdump (3.9.5-2etch1) stable-security; urgency=high  .

• Fix integer overflow in BGP dissector (CVE-2007-3798). Files: f1cb312ffc30a5f23e3b9441f1dc9816 624 net optional tcpdump_3.9.5-2etch1.dsc 2135e7b1f09af0eaf66d2af822bed44a 712411 net optional tcpdump_3.9.5.orig.tar.gz b142686b5c398d103060bf1c19640062 11790 net optional tcpdump_3.9.5-2etch1.diff.gz 8ca411b3fd819e1128aaf9cfd9e9b236 302930 net optional tcpdump_3.9.5-2etch1_i386.deb

-----BEGIN PGP SIGNATURE-----

Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGugMfXm3vHE4uyloRAnm4AKDYxf7bUoVqjA1EUpk8ntZLyya1tQCfRXHN S0HR527byfDwh1wrXM7uThE=
=5tA/
-----END PGP SIGNATURE-----
Accepted:
tcpdump_3.9.5-2etch1.diff.gz
  to pool/main/t/tcpdump/tcpdump_3.9.5-2etch1.diff.gz tcpdump_3.9.5-2etch1.dsc
  to pool/main/t/tcpdump/tcpdump_3.9.5-2etch1.dsc tcpdump_3.9.5-2etch1_i386.deb
  to pool/main/t/tcpdump/tcpdump_3.9.5-2etch1_i386.deb

End of debian-changes-digest Digest V2007 Issue #90

---

Received on Thu Aug 16 16:11:15 2007