lp://staging/~stefanlsd/ubuntu/karmic/audiofile/merge-lenny1

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp://staging/ubuntu/karmic/audiofile

Jamie Strandboge: Approve on 2011-11-30

Diff: 176 lines (+156/-0)

3 files modified

debian/changelog (+12/-0)
debian/patches/00list (+1/-0)
debian/patches/22_CVE-2008-5824.dpatch (+143/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #527033: CVE-2008-5824 audiofile denial of service (application crash) or possibly execute arbitrary code via a crafted WAV file

Medium

Fix Released

Link a bug report

Related blueprints

10. By Stefan Lesicnik on 2010-02-24

* SECURITY UPDATE: Heap-based buffer overflow in msadpcm.c in libaudiofile
  in audiofile 0.2.6 allows context-dependent attackers to cause a denial
  of service (application crash) or possibly execute arbitrary code via a
  crafted WAV file. (LP: #527033)
  - debian/patches/22_CVE-2008-5824.dpatch: Fix buffer overflow when
    decompressing MS ADPCM .wav files.
  - CVE-2008-5824

9. By Kees Cook on 2009-06-24

No-change rebuild to gain FORTIFY defaults.

8. By Daniel T Chen on 2007-12-01

* debian/rules: Explicitly enable LFS (LP: #173334).
* debian/control: Adhere to DebianMaintainerField.

7. By Daniel Kobras <email address hidden> on 2007-06-18

* Added patches:
  + [20_exports_vpath_fix]
  + [21_exports_vpath_fixup]
    Add full path to symbol exports file to failure during VPATH builds.
  + [10_pkgconfig_privlibs]
    In pkgconfig file, strip libs section to minimal content and declare
    additional libraries as private. Closes: #374014
* debian/audiofile-config.1: Add note to man page that audiofile-config
  is deprecated in favour of pkg-config.
* debian/control: Add new package libaudiofile0-dbg, containing
  debugging symbols.
* debian/control: Raise minimum version of debhelper build dependency
  to 5.
* debian/control: Complies with version 3.7.2 of Debian policy.
* debian/rules: Build binaries in separate obj directory rather than
  in-tree. Fixes errors when rebuilding. Closes: #424108
* debian/rules: Raise debhelper compatibility level to 5 to enable
  proper support for debug packages.
* debian/rules: Place stripped debugging symbols of libaudiofile0 in
  separate debug package.
* debian/sfconvert.1, debian/sfinfo.1: Update list of supported
  file formats in man pages. Closes: #408847

6. By Martin Pitt on 2007-02-22

debian/control: Update maintainer fields according to debian-
maintainer-field spec.

5. By Martin Pitt on 2007-02-20

debian/control: Update maintainer fields according to debian-
maintainer-field spec.

4. By Sebastian Dröge on 2006-03-27

* debian/patches/11_audiofile_const.dpatch:
  + Add patch by Ben Maurer that marks some variables const and saves ~2 MB
    of RAM on a complete desktop.
    See http://bmaurer.blogspot.com/2006/03/libaudiofile-patch.html
    for more information.

3. By Daniel Kobras <email address hidden> on 2005-03-19

Added patches:
[10_include_audiofile_in_af_vfs] New.
af_vfs.h relies on audiofile.h being included already, so force the
include. Closes: #300391

2. By Daniel Kobras <email address hidden> on 2002-03-01

* Implements afOpenVirtualFile(), so applications can actually make
  use of the API exposed in af_vfs.h. (Kudos to Daniel Schepler
  <email address hidden>.)
* Include shlibs dependency on this version and up. That's because
  the above amounts to an API change, or rather an API fix. Previous
  versions declared the function in the headers, but didn't implement
  a stub in the lib itself. Same with some of the changes between
  0.1.9, and 0.2.0, so it's really high time we add a shlibs version.

1. By Daniel Kobras <email address hidden> on 2002-03-01

Import upstream version 0.2.3