Version in base suite: 1.11.1+dfsg.1-0.3 Base version: taglib_1.11.1+dfsg.1-0.3 Target version: taglib_1.11.1+dfsg.1-0.3+deb10u1 Base file: /srv/ftp-master.debian.org/ftp/pool/main/t/taglib/taglib_1.11.1+dfsg.1-0.3.dsc Target file: /srv/ftp-master.debian.org/policy/pool/main/t/taglib/taglib_1.11.1+dfsg.1-0.3+deb10u1.dsc changelog | 9 ++++++++ control | 8 ++++--- patches/0005-Fix-possible-Ogg-packet-losses.patch | 23 ++++++++++++++++++++++ patches/series | 1 4 files changed, 38 insertions(+), 3 deletions(-) diff -Nru taglib-1.11.1+dfsg.1/debian/changelog taglib-1.11.1+dfsg.1/debian/changelog --- taglib-1.11.1+dfsg.1/debian/changelog 2019-02-19 22:24:40.000000000 +0000 +++ taglib-1.11.1+dfsg.1/debian/changelog 2020-04-26 16:41:23.000000000 +0000 @@ -1,3 +1,12 @@ +taglib (1.11.1+dfsg.1-0.3+deb10u1) buster; urgency=medium + + * debian/patches/0005: Add patch to fix corruption on + handling ogg files. (Closes: #915281, upstream issue 775) + * debian/control: Update maintainer and Vcs information + accordingly. + + -- Boyuan Yang Sun, 26 Apr 2020 12:41:23 -0400 + taglib (1.11.1+dfsg.1-0.3) unstable; urgency=medium * Non-maintainer upload. diff -Nru taglib-1.11.1+dfsg.1/debian/control taglib-1.11.1+dfsg.1/debian/control --- taglib-1.11.1+dfsg.1/debian/control 2017-10-12 09:15:27.000000000 +0000 +++ taglib-1.11.1+dfsg.1/debian/control 2020-04-26 16:41:23.000000000 +0000 @@ -1,14 +1,16 @@ Source: taglib Section: libs Priority: optional -Maintainer: Modestas Vainius +Maintainer: Debian Multimedia Maintainers +Uploaders: + Boyuan Yang , Build-Depends: cmake, debhelper (>= 9), zlib1g-dev, pkg-kde-tools, libboost-dev, libicu-dev Build-Depends-Indep: doxygen, graphviz, gsfonts-x11 Standards-Version: 4.1.1 Homepage: http://taglib.github.io/ -Vcs-Git: https://anonscm.debian.org/git/collab-maint/taglib.git -Vcs-Browser: https://anonscm.debian.org/cgit/collab-maint/taglib.git/ +Vcs-Git: https://salsa.debian.org/multimedia-team/taglib.git +Vcs-Browser: https://salsa.debian.org/multimedia-team/taglib Package: libtag1v5 Architecture: any diff -Nru taglib-1.11.1+dfsg.1/debian/patches/0005-Fix-possible-Ogg-packet-losses.patch taglib-1.11.1+dfsg.1/debian/patches/0005-Fix-possible-Ogg-packet-losses.patch --- taglib-1.11.1+dfsg.1/debian/patches/0005-Fix-possible-Ogg-packet-losses.patch 1970-01-01 00:00:00.000000000 +0000 +++ taglib-1.11.1+dfsg.1/debian/patches/0005-Fix-possible-Ogg-packet-losses.patch 2020-04-26 16:41:23.000000000 +0000 @@ -0,0 +1,23 @@ +From: Tsuda Kageyu +Date: Thu, 1 Dec 2016 11:32:01 +0900 +Subject: Fix possible Ogg packet losses. + +Bug-Debian: https://bugs.debian.org/915281 +Applied-Upstream: https://github.com/taglib/taglib/commit/9336c82da3a04552168f208cd7a5fa4646701ea4 +--- + taglib/ogg/oggfile.cpp | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/taglib/ogg/oggfile.cpp b/taglib/ogg/oggfile.cpp +index 86b0b07..c36e4d4 100644 +--- a/taglib/ogg/oggfile.cpp ++++ b/taglib/ogg/oggfile.cpp +@@ -253,7 +253,7 @@ void Ogg::File::writePacket(unsigned int i, const ByteVector &packet) + ByteVectorList packets = firstPage->packets(); + packets[i - firstPage->firstPacketIndex()] = packet; + +- if(firstPage != lastPage && lastPage->packetCount() > 2) { ++ if(firstPage != lastPage && lastPage->packetCount() > 1) { + ByteVectorList lastPagePackets = lastPage->packets(); + lastPagePackets.erase(lastPagePackets.begin()); + packets.append(lastPagePackets); diff -Nru taglib-1.11.1+dfsg.1/debian/patches/series taglib-1.11.1+dfsg.1/debian/patches/series --- taglib-1.11.1+dfsg.1/debian/patches/series 2019-02-19 22:24:29.000000000 +0000 +++ taglib-1.11.1+dfsg.1/debian/patches/series 2020-04-26 16:41:23.000000000 +0000 @@ -2,3 +2,4 @@ icu.patch CVE-2017-12678.diff CVE-2018-11439.patch +0005-Fix-possible-Ogg-packet-losses.patch