Ubuntu
libvorbis package

libvorbis 1.1.2-0ubuntu2.3 source package in Ubuntu

Changelog

libvorbis (1.1.2-0ubuntu2.3) dapper-security; urgency=low

  * SECURITY UPDATE: crash or integer overflow with codebook.dim zero
    value (LP: #232150)
    - lib/codebook.c: make sure value of codebook.dim is not zero
    - https://trac.xiph.org/changeset/14602
    - CVE-2008-1419
  * SECURITY UPDATE: code execution via heap overflow in residue partition
    value (LP: #232150)
    - lib/res0.c: verify the phrasebook is not specifying an impossible or
      inconsistent partitioning scheme
    - https://trac.xiph.org/changeset/14598
    - CVE-2008-1420
  * SECURITY UPDATE: code execution via heap overflow in a quantvals and
    quantlist calculation (LP: #232150)
    - lib/codebook.c: add check for absurdly huge codebooks
    - https://trac.xiph.org/changeset/14604
    - CVE-2008-1423
  * Sync rest of patchset with debian package for additional misc security
    fixes and validations
    - http://patch-tracking.debian.net/package/libvorbis/1.1.2.dfsg-1.4

 -- Marc Deslauriers <email address hidden>   Wed, 26 Nov 2008 09:14:38 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Dapper
Original maintainer:
Chris Cheney
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvorbis_1.1.2.orig.tar.gz 1.3 MiB 3f7135ccbda589c251017912f5f5ec9da626c976d2376bcfda19ad6b9c4a6050
libvorbis_1.1.2-0ubuntu2.3.diff.gz 11.5 KiB adb6319a3e902ba3ad0c23692eacbb956cdaafee31cad5b0821fe9b4806e9906
libvorbis_1.1.2-0ubuntu2.3.dsc 706 bytes c42eb01eb5abdf27f0cc1a564e882b3fafc0b62f1f07f1d7bc41d263fbfe4174

View changes file

Binary packages built by this source

libvorbis-dev: No summary available for libvorbis-dev in ubuntu dapper.

No description available for libvorbis-dev in ubuntu dapper.

libvorbis0a: No summary available for libvorbis0a in ubuntu dapper.

No description available for libvorbis0a in ubuntu dapper.

libvorbisenc2: No summary available for libvorbisenc2 in ubuntu dapper.

No description available for libvorbisenc2 in ubuntu dapper.

libvorbisfile3: No summary available for libvorbisfile3 in ubuntu dapper.

No description available for libvorbisfile3 in ubuntu dapper.