-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 3.0 (quilt) Source: mumble Binary: mumble, mumble-server, mumble-dbg Architecture: any Version: 1.2.3-349-g315b5f5-2.2+deb7u2 Maintainer: Ron Lee <[email protected]> Uploaders: Thorvald Natvig <[email protected]> Homepage: http://mumble.sourceforge.net/ Standards-Version: 3.9.3.1 Build-Depends: debhelper (>= 7.0.8), g++-4.6, po-debconf, libboost-dev (>= 1.42), libboost-python-dev (>= 1.42), libqt4-dev (>= 4.5.0), hardening-wrapper, libgl1-mesa-dev, libasound2-dev, libpulse-dev, libogg-dev, libspeex-dev, libspeexdsp-dev, libopus-dev, libsndfile1-dev, libssl-dev, libzeroc-ice34-dev (>= 3.4.2-8.1), ice34-translators (>= 3.4.2-8.1), ice34-slice (>= 3.4.2-8.1), libg15daemon-client-dev, libspeechd-dev, protobuf-compiler, libprotobuf-dev, libavahi-compat-libdnssd-dev, libxi-dev, libcap-dev [linux-any] Package-List: mumble deb sound optional mumble-dbg deb debug extra mumble-server deb sound optional Checksums-Sha1: 786506183801c47204804d356171aba53de7a200 3118757 mumble_1.2.3-349-g315b5f5.orig.tar.gz ff9a2961f4a2887d24c78825e82ab60b19f31db5 52370 mumble_1.2.3-349-g315b5f5-2.2+deb7u2.debian.tar.gz Checksums-Sha256: 3fb99e293446d24e3418970b9149b198e707aa0b10621e0865c0de7ca3e2a8f3 3118757 mumble_1.2.3-349-g315b5f5.orig.tar.gz e32addd16356749bbbfd77808509b78d39d6c7d9f6db0c48c7ac41d9162bfaef 52370 mumble_1.2.3-349-g315b5f5-2.2+deb7u2.debian.tar.gz Files: f83dd14e98c7a7a9e3246b34b49de63c 3118757 mumble_1.2.3-349-g315b5f5.orig.tar.gz b26f84ceedca1073c7bbca5b2681044c 52370 mumble_1.2.3-349-g315b5f5-2.2+deb7u2.debian.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBCAAGBQJURTrzAAoJEBLZsEqQy9jk494P/ibPBdtOJPdqF2yLbSHapA9z PJWnaYOOIWKAgIhWWeUOcMnQu/nD3WrN23rxwUmhl+dbr7oUKQcfTysHHK1ePjtD o7hUKByS/BpGyy6v+ix8omw2pzD35D8S1Zl5Z5KpSkFElONgqatL5Ecd2Gu0wYur ksM20/MFJ0kKOQZQeSYBEWuMner1hyUkItT7DYkcOxRHoijtekv1Pre7B7z1C5IE Xs/eQjixOwxaUwBn6LJWMwFI9Fi6T8NoccRMeQUoumvgTZziDz0Qf7kMCp88uv2w u11dsA1K3t/y1pKFlm01iClWqf4r/HvtHHRC7Pxlv5YnSmLf7Ypvnb4M1ZBRhU+0 IZhx390QMqd89IT8ZWxz7A5qylp8M09f57VZCXCLPBSjUiTaAraaa/pFbg0u63Hp wOcxpJEWGP5eSDwbDPzsII8+clYL9+XLDETMHa411rxCtHApVrB2zQWGi76nxqeW BxATDJbKSXb1IiHpUoQ7+kL/FJu/RMSrhcfC80v1nIKFooFR4yU8Kbh4UV/q0E6S zFo/ad5SuD0u4bsdkxuJNb0eq5rWWihd13KRCDuOIgBg+FjoLDUT6oH/ksjv4y15 AUVmLNReuXGICtoa/KddXMwsOcs/jB5Vp40lpL9gxag01asw2sVEgyyF3X0MoHdO qLNS/pdM4d3LZO4+O6o2 =tgFg -----END PGP SIGNATURE----- Changes: mumble (1.2.3-349-g315b5f5-2.2+deb7u2) wheezy; urgency=medium * debian/control: - remove obsolete Vcs entries. Closes: #681715 * debian/patches: - Add two security fixes. Closes: #748189 Mumble-SA-2014-005.patch CVE-2014-3755 http://mumble.info/security/Mumble-SA-2014-005.txt SVG images with local file references could trigger client DoS Mumble-SA-2014-006.patch CVE-2014-3756 http://mumble.info/security/Mumble-SA-2014-006.txt The Mumble client did not properly HTML-escape some external strings before using them in a rich-text (HTML) context. Thanks to Mikkel Krautz <[email protected]> for reporting the bug, and Gregor Herrmann <[email protected]> for updating the patches for Wheezy. - Add 35-fix-UDP-socket-initialization.diff. Closes: #742091 Fix UDP communication failing until connected user's mic is activated and data sent. Thanks to Mikkel Krautz <[email protected]> for finding the issue and fixing upstream. - Add 37-fix-connect-dialog-hang-dee463ef.diff. Closes: #688444 Fix crashing when connecting to a server. Thanks to Valentin Lorentz <[email protected]> for reporting the bug. -- Christopher Knadle <[email protected]> Wed, 03 Sep 2014 22:15:06 -0400