touch-packages team mailing list archive

[Steve Beattie <sbeattie@xxxxxxxxxx>]

Thanks for taking the time to report this bug and helping to make Ubuntu
better. Since the package referred to in this bug is in universe or
multiverse, it is community maintained. If you are able, I suggest
coordinating with upstream and posting a debdiff for this issue. When a
debdiff is available, members of the security team will review it and
publish the package. See the following link for more information:
https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

** Changed in: lame (Ubuntu)
       Status: New => Incomplete

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to lame in Ubuntu.
https://bugs.launchpad.net/bugs/1486546

Title:
  Multiple security patches not imported from Debian

Status in lame package in Ubuntu:
  Incomplete

Bug description:
  A number of security issues in LAME were found by Debian developers
  via fuzzing and then patched in Debian. The discovered bugs and the
  respective patches can be found at https://bugs.debian.org/cgi-
  bin/bugreport.cgi?bug=775959

  However, the Ubuntu Trusty package for LAME is still vulnerable - the
  very first malformed sample from that bug report reliably causes a
  crash for me on amd64.

  ProblemType: Bug
  DistroRelease: elementary OS 0.3
  Package: lame 3.99.5+repack1-3ubuntu1
  ProcVersionSignature: Ubuntu 3.13.0-62.102-generic 3.13.11-ckt24
  Uname: Linux 3.13.0-62-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.11
  Architecture: amd64
  CurrentDesktop: Pantheon
  Date: Wed Aug 19 15:35:00 2015
  InstallationDate: Installed on 2014-12-10 (251 days ago)
  InstallationMedia: elementary OS 0.3 "Freya" - Daily amd64 (20141209)
  SourcePackage: lame
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lame/+bug/1486546/+subscriptions