Ubuntu
libvorbis package

libvorbis 1.2.0.dfsg-2ubuntu0.1 source package in Ubuntu

Changelog

libvorbis (1.2.0.dfsg-2ubuntu0.1) hardy-security; urgency=low

  * SECURITY UPDATE: crash or integer overflow with codebook.dim zero
    value (LP: #232150)
    - debian/patches/CVE-2008-1423+CVE-2008-1419.patch: make sure value of
      codebook.dim is not zero in lib/codebook.c
    - CVE-2008-1419
  * SECURITY UPDATE: code execution via heap overflow in residue partition
    value (LP: #232150)
    - debian/patches/CVE-2008-1420.patch: verify the phrasebook is not
      specifying an impossible or inconsistent partitioning scheme in
      lib/res0.c
    - CVE-2008-1420
  * SECURITY UPDATE: code execution via heap overflow in a quantvals and
    quantlist calculation  (LP: #232150)
    - debian/patches/CVE-2008-1423+CVE-2008-1419.patch: add check for
      absurdly huge codebooks in lib/codebook.c
    - CVE-2008-1423

 -- Marc Deslauriers <email address hidden>   Wed, 26 Nov 2008 10:24:19 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Hardy
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvorbis_1.2.0.dfsg.orig.tar.gz 1.4 MiB 401129deb8a78b53b0c2098a92cdb84114956ef399ce62b38ac28f0bde04133f
libvorbis_1.2.0.dfsg-2ubuntu0.1.diff.gz 6.7 KiB c8f2f2a17865f9160878bd6f2a4c30cf6cba99f7d5c1418b0165649cb894fd4b
libvorbis_1.2.0.dfsg-2ubuntu0.1.dsc 936 bytes f7a03249078cddc5acb74270f2c095756391a793e7d58a8d26506e7c0b71d834

View changes file

Binary packages built by this source

libvorbis-dev: No summary available for libvorbis-dev in ubuntu hardy.

No description available for libvorbis-dev in ubuntu hardy.

libvorbis0a: No summary available for libvorbis0a in ubuntu hardy.

No description available for libvorbis0a in ubuntu hardy.

libvorbisenc2: No summary available for libvorbisenc2 in ubuntu hardy.

No description available for libvorbisenc2 in ubuntu hardy.

libvorbisfile3: No summary available for libvorbisfile3 in ubuntu hardy.

No description available for libvorbisfile3 in ubuntu hardy.