Re: Wheezy update of libvorbis?

2017-08-07 Thread Petter Reinholdtsen
you handle the Wheezy issues, while I/we take care of the unstable/testing upload. But I have not been able to track down fixes for the issues yet. Did you find any patches? If so, please submit links to BTS. -- Happy hacking Petter Reinholdtsen

Re: Wheezy update of vorbis-tools for CVE-2015-6749

2017-07-03 Thread Petter Reinholdtsen
en. The upload is already done and accepted, if I understood the email I got correctly. -- Happy hacking Petter Reinholdtsen

Re: Wheezy update of vorbis-tools for CVE-2015-6749

2017-07-02 Thread Petter Reinholdtsen
e with more experience in the process would take care of that book keeping, so I assumed my part of this update process was done when the package was accepted into the archive. Is that still correct? -- Happy hacking Petter Reinholdtsen

Re: Wheezy update of vorbis-tools for CVE-2015-6749

2017-07-02 Thread Petter Reinholdtsen
[Petter Reinholdtsen] > Thank you. I'm building and testing in wheezy at the moment, and will > upload when I am done. I would be very happy if someone else took the > bookkeeping. I'm not quite sure if the CVE tracker should be updated like this for LTS entries or not.

Re: Wheezy update of vorbis-tools for CVE-2015-6749

2017-07-02 Thread Petter Reinholdtsen
hannels in the header (CVE-2014-9638, CVE-2014-9639). (Closes: 776086) * Fix oggenc crash on closing raw input files by backporting r19117 from upstream (CVE-2014-9640) (Closes: #771363). -- Petter Reinholdtsen Sun, 02 Jul 2017 20:53:04 +0200 -- Happy hacking Petter Reinholdtsen

Wheezy update of vorbis-tools for CVE-2015-6749

2017-07-02 Thread Petter Reinholdtsen
and beyon. Should this update be announced on the announcement list? Does it need a DLA? The security team tagged it no-dsa. I can build, test and upload, but am unsure abount the announcing part. -- Happy hacking Petter Reinholdtsen

Re: squeeze update of vorbis-tools?

2015-09-22 Thread Petter Reinholdtsen
two patches I believe fixes CVE issues with vorbis-tool. Hopefully the fixes should be uploaded into unstable soon. I am in touch with Mike on IRC to discuss how to best coordinate this fixing. I suggest #debian-edu or #debian-multimedia as meeting places. -- Happy hacking Petter Reinholdtsen