lp:ubuntu/dapper-security/libvorbis

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

9. By Marc Deslauriers on 2008-11-26

* SECURITY UPDATE: crash or integer overflow with codebook.dim zero
  value (LP: #232150)
  - lib/codebook.c: make sure value of codebook.dim is not zero
  - https://trac.xiph.org/changeset/14602
  - CVE-2008-1419
* SECURITY UPDATE: code execution via heap overflow in residue partition
  value (LP: #232150)
  - lib/res0.c: verify the phrasebook is not specifying an impossible or
    inconsistent partitioning scheme
  - https://trac.xiph.org/changeset/14598
  - CVE-2008-1420
* SECURITY UPDATE: code execution via heap overflow in a quantvals and
  quantlist calculation (LP: #232150)
  - lib/codebook.c: add check for absurdly huge codebooks
  - https://trac.xiph.org/changeset/14604
  - CVE-2008-1423
* Sync rest of patchset with debian package for additional misc security
  fixes and validations
  - http://patch-tracking.debian.net/package/libvorbis/1.1.2.dfsg-1.4

8. By Kees Cook on 2007-08-15

* SECURITY UPDATE: arbitrary code execution via heap overflow
* lib/{res0,floor1,info}.c: backported upstream changes inline from 1.2.0.
* References
  CVE-2007-3106
  CVE-2007-4029

7. By Kees Cook on 2007-08-15

* SECURITY UPDATE: arbitrary code execution via heap overflow
* lib/res0.c, lib/floor1.c: backported upstream changes inline from 1.2.0.
* References
  CVE-2007-3106

6. By Fabio Massimo Di Nitto on 2006-05-02

Fix error in debian/rules and as a consequence FTBFS.

5. By Matthias Klose on 2005-12-14

* New upstream version.
* Build using default g++ again. Ubuntu #12722.

4. By Matthias Klose on 2005-07-21

Build using GCC 3.4. Addresses Ubuntu 12722.

3. By Chris Cheney on 2003-12-09

* New upstream.
* Improved descriptions. (Closes: #166649)
* Updated DEB_BUILD_OPTIONS support. (Closes: #188464)

2. By Chris Cheney on 2001-12-24

* New upstream. (Closes: #121995, #123472)
* added autotools target (config.* updater) to rules

1. By Chris Cheney on 2001-12-24

Import upstream version 1.0rc3