• Bug#1106285: marked as done (gst-plugins-bad1.0: CVE-2025-3887) (2/2)

    From Debian Bug Tracking System@1:229/2 to All on Thu Jun 19 13:20:01 2025
    [continued from previous message]

    by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
    (Exim 4.94.2)
    (envelope-from <envelope@ftp-master.debian.org>)
    id 1uSDGZ-002TPF-Ez
    for 1106285-close@bugs.debian.org; Thu, 19 Jun 2025 11:17:11 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
    d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
    Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
    :Content-Description:In-Reply-To:References;
    bh=afWQgTvWbxiy8Sj6R9YS/kQ3a3pMhCoglsVEGstrmSs=; b=CKl/xP777zRZAAyU2MiBAwXLFQ
    tIomMpHoqrq5UUTIy030ORSE2HjXEHpGNg5pYOAtgiFKQ7Bdl/sEmP8uJ/PwnKUT/sjWBzMIIZ6IV
    0s0QquXweDrJW/nqO9ZYJfNih18coRwiI9/9tswwmqeecIPGBiqs7BFqk9Qr2ufjC1/v73FE6Nzir
    x0lUjfc4+wuKZUikdjfsdOQZJ+7ehhrLNHRHcjo00Tg/5gApkeXItKo8dtD99aCLd1UFtUQ1PJiTl
    b94CJtdN9tUfmKK5k72isWPXKh302sLW3hpwjj9WjbiStgtfCMeRX6uqhkG9vfSfW7J9rPfmd3fcY
    ksOevlcQ==;
    Received: from dak by fasolo.debian.org with local (Exim 4.94.2)
    (envelope-from <envelope@ftp-master.debian.org>)
    id 1uSDGY-003SYz-D2; Thu, 19 Jun 2025 11:17:10 +0000
    From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
    Reply-To: =?utf-8?q?Moritz_M=C3=BChlenhoff?= <jmm@debian.org>
    To: 1106285-close@bugs.debian.org
    X-DAK: dak process-policy
    X-Debian: DAK
    X-Debian-Package: gst-plugins-bad1.0
    Debian: DAK
    Debian-Changes: gst-plugins-bad1.0_1.22.0-4+deb12u6_amd64.changes Debian-Source: gst-plugins-bad1.0
    Debian-Version: 1.22.0-4+deb12u6
    Debian-Architecture: source
    Debian-Suite: proposed-updates
    Debian-Archive-Action: accept
    MIME-Version: 1.0
    Subject: Bug#1106285: fixed in gst-plugins-bad1.0 1.22.0-4+deb12u6 Content-Type: multipart/signed; micalg="pgp-sha256";
    protocol="application/pgp-signature";
    boundary="===============2081450457290040987=="
    Message-Id: <E1uSDGY-003SYz-D2@fasolo.debian.org>
    Date: Thu, 19 Jun 2025 11:17:10 +0000

    --===============2081450457290040987==
    Content-Type: text/plain; charset="utf-8"
    Content-Transfer-Encoding: quoted-printable

    Source: gst-plugins-bad1.0
    Source-Version: 1.22.0-4+deb12u6
    Done: Moritz Mühlenhoff <jmm@debian.org>

    We believe that the bug you reported is fixed in the latest version of gst-plugins-bad1.0, which is due to be installed in the Debian FTP archive.

    A summary of the changes between this version and the previous one is
    attached.

    Thank you for reporting the bug, which will now be closed. If you
    have further comments please address them to 1106285@bugs.debian.org,
    and the maintainer will reopen the bug report if appropriate.

    Debian distribution maintenance software
    pp.
    Moritz Mühlenhoff <jmm@debian.org> (supplier of updated gst-plugins-bad1.0 package)

    (This message was generated automatically at their request; if you
    believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org)


    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sat, 07 Jun 2025 20:21:59 +0200
    Source: gst-plugins-bad1.0
    Architecture: source
    Version: 1.22.0-4+deb12u6
    Distribution: bookworm-security
    Urgency: medium
    Maintainer: Maintainers of GStreamer packages <gst-plugins-bad1.0@packages.debian.org>
    Changed-By: Moritz Mühlenhoff <jmm@debian.org>
    Closes: 1106285
    Changes:
    gst-plugins-bad1.0 (1.22.0-4+deb12u6) bookworm-security; urgency=medium
    .
    * CVE-2025-3887 (Closes: #1106285)
    Checksums-Sha1:
    4a82fa8a974adb30299886a501d521d596827117 5828 gst-plugins-bad1.0_1.22.0-4+deb12u6.dsc
    a4d323e0ffa79e18abcf7be147690715746a7f70 44460 gst-plugins-bad1.0_1.22.0-4+deb12u6.debian.tar.xz
    61be99ddc5a907f43323b723f858651cdcec3b03 38092 gst-plugins-bad1.0_1.22.0-4+deb12u6_amd64.buildinfo
    Checksums-Sha256:
    f9d231260253270068d3ff54599945a8611c0b62e273d8ced1a6f6589b7330d9 5828 gst-plugins-bad1.0_1.22.0-4+deb12u6.dsc
    10fb9edfdf7d5ca902391ba7c8949b729a832650e4f981c1108ab0c1bbb0b805 44460 gst-plugins-bad1.0_1.22.0-4+deb12u6.debian.tar.xz
    39e5cd591130d08e79853a1205dcc9037159670425383e584c3a2b9b976b988c 38092 gst-plugins-bad1.0_1.22.0-4+deb12u6_amd64.buildinfo
    Files:
    868d0075bd51e0f0bc96d66c8a89b76e 5828 libs optional gst-plugins-bad1.0_1.22.0-4+deb12u6.dsc
    fc12ffe3e90547b119fbe395677f6615 44460 libs optional gst-plugins-bad1.0_1.22.0-4+deb12u6.debian.tar.xz
    9aca22a96a9a5ff3fd34ea6ead778f08 38092 libs optional gst-plugins-bad1.0_1.22.0-4+deb12u6_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmhEhaEACgkQEMKTtsN8 Tjbe0g/+JhaQ63c+takVXZ0EZh5fdameze/n7kVRY8wNZDln5W5Mf3pdtH47FiBl aLb8keYQzPgUfGpbSC66IGiYsQB842gUAQLOXPBfhcH/t7gQ8SeI1g4RE2McUbUd KdmE8ZdwUJpwiCt5psHRAp63S9pHxj43S48KAh8yTX3Dyjk9v5N/ji3/L/s5bAtB PWKn6RWNMGNm494pRmouHUUhTvjC5Q8K3uOs9FXzgu8PsnYUFM9iLJgW4pt1gMUE nDTl0JyDPuaA3Ng93J0iFg9lxRHeDMHsC2hXfDrJW1g2pc3Jf9wD4BOnul+yLbTz 9rRiN3lOJV3su9bpYrBxiHpn2zeuoqgXHr/ber+5q41YNcNxzx6XHV3HVh3ex7vO dy6eOIf6dFxfvSIYHPat8HlOY0CNX+S5UXYRUzKejBLAA3tepmnIVYZbKfO4dc/1 /uYSiOKtl8luoXPbis9D0MsWDm+8YyPxsAgL5f2LXjE1JCds42wvJPPJO8ri8oiA s9+sFDh/+S9tt2x5Oeq5xzh+xNc4ZgrOR2XQ51vYrlvfHkt18yBAuVh5OrhxAVmo YVsLGh/+kp7XwXLWgO3GVOBlT6RxbRb1loqS3kaT7nkb9ZdV8Jw0q7+kYbwl2SOM My/Z4M3DuBOp61r0wtZoUjfDpDGU/quvlxljqNTiodD+kxxc5N8=
    =RPio
    -----END PGP SIGNATURE-----


    --============== 81450457290040987=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaFPxtgAKCRCb9qggYcy5 IQ1vAQC4d28pRrCeehbBJLhipqH/ROb+1zsd+hx7+9L4kxNNmAEAjuIo14Fo+5hX 3X4u9UWSWFKI6XjSqg3Lp1eeH+yvMQw=ihyn
    -----END PGP SIGNATURE-----

    --============== 81450457290040987==--

    --- SoupGate-Win32 v1.05
    * Origin: you cannot sedate... all the things you hate (1:229/2)