libvorbis 1.2.0.dfsg-6ubuntu0.1 source package in Ubuntu

Changelog

libvorbis (1.2.0.dfsg-6ubuntu0.1) karmic-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    multiple vulnerabilities
    - debian/patches/CVE-2009-3379.patch: Don't try to read past the end of
      the comment packet if the string lengths are corrupt in lib/info.c,
      check for premature EOP in lib/res0.c, implement hardening in
      lib/{codebook,floor1,info,mapping0}.c, eliminate blocklist overflow
      in lib/backends.h, don't allow codeword lengths longer than 32 bits
      in lib/codebook.c.
    - CVE-2009-3379
  * SECURITY UPDATE: code execution via heap overflow in residue partition
    value (LP: #232150)
    - debian/patches/CVE-2008-1420-2.patch: add additional checks to fix
      issue, but still maintain backwards compatibility in lib/res0.c,
      lib/modes/{residue_44u,residue_44}.h, lib/backends.h.
    - CVE-2008-1420
 -- Marc Deslauriers <email address hidden>   Thu, 12 Nov 2009 15:02:17 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Karmic
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvorbis_1.2.0.dfsg.orig.tar.gz 1.4 MiB 401129deb8a78b53b0c2098a92cdb84114956ef399ce62b38ac28f0bde04133f
libvorbis_1.2.0.dfsg-6ubuntu0.1.diff.gz 13.7 KiB a742041c5456882d473a4c604a9e461aafc0d09a8704c176cf2786398e9e08e7
libvorbis_1.2.0.dfsg-6ubuntu0.1.dsc 1.2 KiB 427d87e2766e0aa61b5158a7681c87a7042422bf9f4c800836a657a1539c1a36

View changes file

Binary packages built by this source

libvorbis-dev: No summary available for libvorbis-dev in ubuntu karmic.

No description available for libvorbis-dev in ubuntu karmic.

libvorbis0a: No summary available for libvorbis0a in ubuntu karmic.

No description available for libvorbis0a in ubuntu karmic.

libvorbisenc2: No summary available for libvorbisenc2 in ubuntu karmic.

No description available for libvorbisenc2 in ubuntu karmic.

libvorbisfile3: No summary available for libvorbisfile3 in ubuntu karmic.

No description available for libvorbisfile3 in ubuntu karmic.