Ubuntu
libvorbis package

libvorbis 1.2.0.dfsg-3.1ubuntu0.8.10.1 source package in Ubuntu

Changelog

libvorbis (1.2.0.dfsg-3.1ubuntu0.8.10.1) intrepid-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution from
    crafted .ogg file (LP: #413528)
    - debian/patches/CVE-2009-2663.patch: don't allow repeated values in
      post list in lib/floor1.c and make sure maptype is valid in
      lib/res0.c.
    - CVE-2009-2663
  * SECURITY UPDATE: code execution via heap overflow in residue partition
    value (LP: #232150)
    - debian/patches/CVE-2008-1420.patch: update patch to fix regression
      when reading files encoded with libvorbis 1.0beta1.
    - CVE-2008-1420

 -- Marc Deslauriers <email address hidden>   Fri, 21 Aug 2009 15:34:55 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Intrepid
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvorbis_1.2.0.dfsg.orig.tar.gz 1.4 MiB 401129deb8a78b53b0c2098a92cdb84114956ef399ce62b38ac28f0bde04133f
libvorbis_1.2.0.dfsg-3.1ubuntu0.8.10.1.diff.gz 8.6 KiB c59085334a8bfce8ce2ec5bd8d5d5066fa95c0f18dc77bfcf8bc809c21ddf9a7
libvorbis_1.2.0.dfsg-3.1ubuntu0.8.10.1.dsc 1.4 KiB 567bf5d36aaba526d51c21a082679fe084d24702421d5579665257b9a92eb313

View changes file

Binary packages built by this source

libvorbis-dev: No summary available for libvorbis-dev in ubuntu intrepid.

No description available for libvorbis-dev in ubuntu intrepid.

libvorbis0a: No summary available for libvorbis0a in ubuntu intrepid.

No description available for libvorbis0a in ubuntu intrepid.

libvorbisenc2: No summary available for libvorbisenc2 in ubuntu intrepid.

No description available for libvorbisenc2 in ubuntu intrepid.

libvorbisfile3: No summary available for libvorbisfile3 in ubuntu intrepid.

No description available for libvorbisfile3 in ubuntu intrepid.