Bug#738554: libbluray-bdj security issues

Am Sonntag, den 03.05.2015, 09:33 +0200 schrieb Christoph Anton Mitterer: > I mean the best solution would probably be, that the library > (respectively the using program) asks before actually executing BD-J. It should be handled on the application level. The library's job is to parse and execute

Re: rtkit diff in Ubuntu

On Wed, Apr 29, 2015 at 11:01:47PM AEST, Felipe Sateler wrote: > On 28 April 2015 at 11:07, Felipe Sateler wrote: > > On 28 April 2015 at 10:32, Martin Pitt wrote: > >> Hey Felipe, > >> > >> Felipe Sateler [2015-04-24 18:25 -0300]: > >>> I see that rtkit has diverged in Ubuntu. Should debian inco

mpv 0.9.0-1 MIGRATED to testing

FYI: The status of the mpv source package in Debian's testing distribution has changed. Previous version: 0.8.3-1 Current version: 0.9.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive lat

pyliblo 0.10.0-1 MIGRATED to testing

FYI: The status of the pyliblo source package in Debian's testing distribution has changed. Previous version: 0.9.2-2 Current version: 0.10.0-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receiv

libebml 1.3.1-3 MIGRATED to testing

FYI: The status of the libebml source package in Debian's testing distribution has changed. Previous version: 1.3.0-2 Current version: 1.3.1-3 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive

rosegarden 1:14.12-1 MIGRATED to testing

FYI: The status of the rosegarden source package in Debian's testing distribution has changed. Previous version: 1:14.02-2 Current version: 1:14.12-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

rtirq 20150216-1 MIGRATED to testing

FYI: The status of the rtirq source package in Debian's testing distribution has changed. Previous version: 20140413-1 Current version: 20150216-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will rec

cantata 1.5.2.ds2-1 MIGRATED to testing

FYI: The status of the cantata source package in Debian's testing distribution has changed. Previous version: 1.4.2.ds1-1 Current version: 1.5.2.ds2-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will

glyr 1.0.8-1 MIGRATED to testing

FYI: The status of the glyr source package in Debian's testing distribution has changed. Previous version: 1.0.6+git20140423-1 Current version: 1.0.8-1 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you wil

Re: [PATCH 1/4] Import upstream version 3.6.1

Hi Julian, On 3 May 2015 at 09:04, Julian Wollrath wrote: > I am terribly sorry for that big e-mail, I forgot to exclude this patch > from git-send-email. Thanks for sharing your work. However, in the multimedia team we do not really work with the patch bombs generated by git-send-email. Maybe y

libdiscid_0.6.1-4_amd64.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 03 May 2015 14:54:30 +0200 Source: libdiscid Binary: libdiscid0 libdiscid-dev libdiscid0-dbg libdiscid-doc Architecture: source all Version: 0.6.1-4 Distribution: unstable Urgency: medium Maintainer: Debian Multime

Processing of libdiscid_0.6.1-4_amd64.changes

libdiscid_0.6.1-4_amd64.changes uploaded successfully to localhost along with the files: libdiscid_0.6.1-4.dsc libdiscid_0.6.1-4.debian.tar.xz libdiscid-doc_0.6.1-4_all.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) _

Re: [PATCH 1/4] Import upstream version 3.6.1

I am terribly sorry for that big e-mail, I forgot to exclude this patch from git-send-email. With best regards, Julian Wollrath ___ pkg-multimedia-maintainers mailing list pkg-multimedia-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org

[PATCH 3/4] Bump B-D on audacious to 3.6

--- debian/changelog | 1 + debian/control | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 5ff522ca2528..8e56c0706f11 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,7 @@ audacious-plugins (3.6.1-0.1) UNRELEASED; urg

[PATCH 2/4] Update VCS URL's

--- debian/changelog | 1 + debian/control | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index 9d877c7f462b..5ff522ca2528 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,7 @@ audacious-plugins (3.6.1-0.1) UNRELEASED;

[PATCH 4/4] Bump standards version to 3.5.6

--- debian/changelog | 1 + debian/control | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 8e56c0706f11..48dec4d87896 100644 --- a/debian/changelog +++ b/debian/changelog @@ -4,6 +4,7 @@ audacious-plugins (3.6.1-0.1) UNRELEASED; urg

audacious-plugins version 3.6.1

This series updates the audaciousplugins packaging to the new upstream version (3.6.1). Since I used this only for my local machines, I did not bother to update copyright informations but nevertheless, you may use it as starting point for the official Debian package of audacious-plugins. With best

[PATCH 3/6] Bump standards version (no changes necessary)

--- debian/changelog | 1 + debian/control | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index d161ca4875f9..f68778dc0a01 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,7 @@ audacious (3.6.1-0.1) UNRELEASED; urgency=med

[PATCH 6/6] Bump libaudcore version to 3 and update its symbols

--- debian/changelog | 1 + debian/control | 6 +- debian/libaudcore2.install | 3 - debian/libaudcore2.symbols | 196 - debian/libaudcore3.install | 3 + debian/libaudcore3.symbols | 412 + 6 files chang

[PATCH 2/6] Update VCS-URL's

--- debian/changelog | 1 + debian/control | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index 566aff3f3011..d161ca4875f9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,7 @@ audacious (3.6.1-0.1) UNRELEASED; urgency=

[PATCH 4/6] Change occurences from libgtk-3-dev to libgtk2.0-dev.

Audacious 3.6 and onwards switched back to GTK+ 2.x. --- debian/changelog | 2 ++ debian/control | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index f68778dc0a01..f599e4dcde17 100644 --- a/debian/changelog +++ b/debian/changelog @@ -

[PATCH 5/6] debian/rules: audacious.png now resides in images

--- debian/changelog | 1 + debian/rules | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index f599e4dcde17..94005f640693 100644 --- a/debian/changelog +++ b/debian/changelog @@ -6,6 +6,7 @@ audacious (3.6.1-0.1) UNRELEASED; urgency=

Audacious version 3.6.1

This series updates the audacious packaging to the new upstream version (3.6.1). Since I used this only for my local machines, I did not bother to update copyright informations but nevertheless, you may use it as starting point for the official Debian package of audacious. With best regards, Juli

mpv_0.9.1-1_amd64.changes ACCEPTED into unstable

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 03 May 2015 12:51:14 +0200 Source: mpv Binary: mpv mpv-dbg libmpv1 libmpv-dev libmpv-dbg Architecture: source amd64 Version: 0.9.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Multimedia Maintainers

mpv_0.9.1-1+ffmpeg_amd64.changes ACCEPTED into experimental

Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sun, 03 May 2015 12:55:20 +0200 Source: mpv Binary: mpv mpv-dbg libmpv1 libmpv-dev libmpv-dbg Architecture: source amd64 Version: 0.9.1-1+ffmpeg Distribution: experimental Urgency: medium Maintainer: Debian Multimedia M

Processing of mpv_0.9.1-1+ffmpeg_amd64.changes

mpv_0.9.1-1+ffmpeg_amd64.changes uploaded successfully to localhost along with the files: mpv_0.9.1-1+ffmpeg.dsc mpv_0.9.1-1+ffmpeg.debian.tar.xz mpv_0.9.1-1+ffmpeg_amd64.deb mpv-dbg_0.9.1-1+ffmpeg_amd64.deb libmpv1_0.9.1-1+ffmpeg_amd64.deb libmpv-dev_0.9.1-1+ffmpeg_amd64.deb libmpv-d

Processing of mpv_0.9.1-1_amd64.changes

mpv_0.9.1-1_amd64.changes uploaded successfully to localhost along with the files: mpv_0.9.1-1.dsc mpv_0.9.1.orig.tar.gz mpv_0.9.1-1.debian.tar.xz mpv_0.9.1-1_amd64.deb mpv-dbg_0.9.1-1_amd64.deb libmpv1_0.9.1-1_amd64.deb libmpv-dev_0.9.1-1_amd64.deb libmpv-dbg_0.9.1-1_amd64.deb Gre

collada2gltf_20140924-2_amd64.changes is NEW

binary:libcollada2gltfconvert-dev is NEW. source:collada2gltf is NEW. collada2gltf_20140924.orig.tar.xz is only available in NEW. Your package has been put into the NEW queue, which requires manual action from the ftpteam to process. The upload was otherwise valid (it had a good OpenPGP signature

Processing of collada2gltf_20140924-2_amd64.changes

collada2gltf_20140924-2_amd64.changes uploaded successfully to localhost along with the files: collada2gltf_20140924-2.dsc collada2gltf_20140924-2.debian.tar.xz libcollada2gltfconvert-dev_20140924-2_amd64.deb Greetings, Your Debian queue daemon (running on host franck.debian.org) _

Bug#738554: libbluray-bdj security issues

On Sun, 2015-05-03 at 09:16 +0200, Fabian Greffrath wrote: > If we had a bug opened against every package which *by principle* could > hold a security issue, we'd have a lot. Well as I've said... I guess one doesn't need to have much imagination that one can think that a system like BD-J may be ab

Bug#738554: libbluray-bdj security issues

Am Sonntag, den 03.05.2015, 02:12 +0200 schrieb Christoph Anton Mitterer: > That would be the first jailing technology where a break-out is > impossible. > Sandboxes where much more people work upon than it's probably the case > for libbluray-bdj are regularly hacked (e.g. Chromium, Firefox, etc.)