Ubuntu
libvorbis package

libvorbis 1.2.0.dfsg-1ubuntu0.1 source package in Ubuntu

Changelog

libvorbis (1.2.0.dfsg-1ubuntu0.1) gutsy-security; urgency=low

  * SECURITY UPDATE: crash or integer overflow with codebook.dim zero
    value (LP: #232150)
    - debian/patches/CVE-2008-1423+CVE-2008-1419.patch: make sure value of
      codebook.dim is not zero in lib/codebook.c
    - CVE-2008-1419
  * SECURITY UPDATE: code execution via heap overflow in residue partition
    value (LP: #232150)
    - debian/patches/CVE-2008-1420.patch: verify the phrasebook is not
      specifying an impossible or inconsistent partitioning scheme in
      lib/res0.c
    - CVE-2008-1420
  * SECURITY UPDATE: code execution via heap overflow in a quantvals and
    quantlist calculation  (LP: #232150)
    - debian/patches/CVE-2008-1423+CVE-2008-1419.patch: add check for
      absurdly huge codebooks in lib/codebook.c
    - CVE-2008-1423

 -- Marc Deslauriers <email address hidden>   Wed, 26 Nov 2008 10:20:38 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Gutsy
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
libs
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvorbis_1.2.0.dfsg.orig.tar.gz 1.4 MiB 401129deb8a78b53b0c2098a92cdb84114956ef399ce62b38ac28f0bde04133f
libvorbis_1.2.0.dfsg-1ubuntu0.1.diff.gz 6.6 KiB ba61cc6f528623e5966f418e2f0daa79eb8830597fc0611301cda9f74c139d81
libvorbis_1.2.0.dfsg-1ubuntu0.1.dsc 936 bytes 0088d4208f687c4e7263766a42c533aa1effd9cb53b87fdb5198c605022b6834

View changes file

Binary packages built by this source

libvorbis-dev: No summary available for libvorbis-dev in ubuntu gutsy.

No description available for libvorbis-dev in ubuntu gutsy.

libvorbis0a: No summary available for libvorbis0a in ubuntu gutsy.

No description available for libvorbis0a in ubuntu gutsy.

libvorbisenc2: No summary available for libvorbisenc2 in ubuntu gutsy.

No description available for libvorbisenc2 in ubuntu gutsy.

libvorbisfile3: No summary available for libvorbisfile3 in ubuntu gutsy.

No description available for libvorbisfile3 in ubuntu gutsy.