Your message dated Wed, 16 Aug 2023 07:30:30 +0200
with message-id <znxe9mfkihi2p...@eldamar.lan>
and subject line Re: Accepted gst-plugins-ugly1.0 1.22.5-1 (source) into
unstable
has caused the Debian Bug report #1043501,
regarding gst-plugins-ugly1.0: ZDI-CAN-21443 ZDI-CAN-21444
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1043501: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1043501
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: gst-plugins-ugly1.0
Version: 1.22.4-1
Severity: grave
Tags: security upstream
X-Debbugs-Cc: car...@debian.org, Debian Security Team <t...@security.debian.org>
There are two gst-streamer-ugly1.0 reports from ZDI (not yet public)
tracked as
https://gstreamer.freedesktop.org/security/sa-2023-0004.html
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/4266ba0fd2be7702044a5d90a8215abe41709874
https://gstreamer.freedesktop.org/security/sa-2023-0005.html
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/eb89e0a13eeb59fc5bab787ded50faf6a50087e3
AFAICS, no CVEs are yet assigned?
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: gst-plugins-ugly1.0
Source-Version: 1.22.5-1
On Tue, Aug 15, 2023 at 03:06:19PM +0000, Debian FTP Masters wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Format: 1.8
> Date: Tue, 15 Aug 2023 10:46:22 -0400
> Source: gst-plugins-ugly1.0
> Built-For-Profiles: noudeb
> Architecture: source
> Version: 1.22.5-1
> Distribution: unstable
> Urgency: medium
> Maintainer: Maintainers of GStreamer packages
> <gst-plugins-ugly...@packages.debian.org>
> Changed-By: Jeremy Bícha <jbi...@ubuntu.com>
> Changes:
> gst-plugins-ugly1.0 (1.22.5-1) unstable; urgency=medium
> .
> * Team upload
> * New upstream release
This fixes as well #1043501, sa-2023-0004 and sa-2023-0005.
Regards,
Salvatore
--- End Message ---
