lp:ubuntu/maverick-updates/libvorbis

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

16. By Marc Deslauriers on 2012-02-17

* SECURITY UPDATE: denial of service and possible code execution
  - lib/floor1.c: validate count.
  - https://trac.xiph.org/changeset/18151
  - CVE-2012-0444

15. By John Ferlito on 2010-03-26

* New upstream release.
  - Please package new upstream version 1.3.1. (Closes: #575676)
  - libvorbis: additional CVE-2009-3379 security fixes. (Closes: #573562)
  - libvorbis0a: Incorrect encoding on powerpc. (Closes: #549899)
  - FTBFS with binutils-gold. (Closes: #555383)

14. By Marc Deslauriers on 2010-02-26

* SECURITY UPDATE: denial of service and possible code execution via
  multiple vulnerabilities
  - debian/patches/CVE-2009-3379.patch: add a couple of missing commits:
    eliminate blocklist overflow in lib/backends.h, don't allow codeword
    lengths longer than 32 bits in lib/codebook.c.
  - CVE-2009-3379
* debian/rules, debian/control: add quilt patch system

13. By John Ferlito on 2009-10-13

* debian/copyright
  - Add details for doc/rfc5215.txt (Closes: #550687).
* Add a -dbg package (Closes: #516661).

12. By Peter Samuelson <email address hidden> on 2009-08-10

* Fix CVE-2009-2663: two bugs in libvorbis that allowed a crafted ogg
  file to corrupt memory. (Closes: #540958)
* patches/CVE-2008-1420.patch: fix a regression playing files generated
  by 1.0b1, from upstream trunk. Thanks Michael Gold. (Closes: #504421)

11. By Peter Samuelson <email address hidden> on 2009-05-28

* New maintainer.
* Standards-Version: 3.8.1.
* gcc -fno-finite-math-only on armel, to work around a gcc bug
  (fixed upstream in gcc 4.3 and 4.4). (Closes: #515949)
* Fix watch file to unmangle .dfsg in version, thanks Lintian.
* Distinguish the short descriptions of the different lib packages, and
  other tweaks to debian/control. Thanks Lintian. (Closes: #432688)

10. By Clint Adams on 2008-06-10

* Add upstream-r14811_huffman_sanity_checks.diff. closes: #482039.
* Bump to Standards-Version 3.8.0.
* Remove myself from Uploaders.

9. By Steffen Joeris <email address hidden> on 2008-05-26

* Non-maintainer upload by the security team
* Fix integer overflows (and possible DoS attacks) via crafted
  OGG files (Closes: #482518)
  Fixes: CVE-2008-1423, CVE-2008-1420, CVE-2008-1419

8. By Joey Hess <email address hidden> on 2006-10-24

Fix shlibs files for libvorbisenc and libvorbisfile, which were broken
by my first NMU to have dependencies for libvorbis0a. Closes: #395048

7. By Sebastian Dröge on 2006-06-30

* Sync with Debian
* No remaining Ubuntu changes but different tarballs