lp:ubuntu/hardy-updates/libmodplug

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

8. By Marc Deslauriers on 2009-05-06

* SECURITY UPDATE: code execution via integer overflow in
  CSoundFile::ReadMed
  - src/load_med.cpp: check for overflow in song comment and song name.
    Make sure strings are properly NULL-terminated.
  - http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&r2=1.2
  - http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.2&r2=1.3
  - CVE-2009-1438

7. By Zed Pobre <email address hidden> on 2007-08-23

* Debhelper compatibility level 5, using debian/compat
* use both >= and << for source:Version for the -dev package, to
  properly handle binNMU safety (closes: #437489)
* Build-Depends: autotools-dev. Also sort build-depends packages
  alphabetically.
* Standards-Version 3.7.2.2 (no changes required)

6. By Jonathan Riddell on 2007-08-11

[ Stefan Skotte ]
Change debian/rules to run automake1.9 as specified in build-deps
not default automake

5. By Matthias Klose on 2007-03-05

Rebuild for changes in the amd64 toolchain.

4. By Steinar H. Gunderson on 2006-09-25

* Non-maintainer upload.
* Check for very large sample sizes that could create overflows, enabling an
  attacker to allocate zero bytes and possibly execute arbitrary codes as
  the user [CVE-2006-4192]. (Closes: #383574)
* Run aclocal-1.9 instead of aclocal, as automake1.9 doesn't provide the
  latter; fixes FTBFS.

3. By Zed Pobre <email address hidden> on 2005-02-02

* Use stdafx.h from upstream CVS, correcting issues with 64-bit
  architectures.
* Altered short description to better follow policy
* Debhelper cleanups

2. By Zed Pobre <email address hidden> on 2004-09-10

* Acknowledge NMU. (closes: #267204)
* Fixed Makefile.in locations in clean: target.
* Changed "copyright" to "license" when describing the license in
  debian/copyright.
* Make the shlibs force a version >= 1:0.7-1 to be safe.

1. By Zed Pobre <email address hidden> on 2004-09-10

Import upstream version 0.7