libvorbis 1.3.5-4ubuntu0.1 source package in Ubuntu

Changelog

libvorbis (1.3.5-4ubuntu0.1) artful-security; urgency=medium

  * SECURITY UPDATE: Remote code execution
    - debian/patches/CVE-2017-14632.patch: don't clear opb in
      lib/info.c.
    - CVE-2017-14632
  * SECURITY UPDATE: out-of-bounds array read
    - debian/patches/CVE-2017-14633.patch: don't allow for more than
      256 channels in lib/info.c.
    - CVE-2017-14633

 -- <email address hidden> (Leonidas S. Barbosa)  Tue, 13 Feb 2018 13:42:13 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Artful
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libvorbis_1.3.5.orig.tar.gz 1.6 MiB 6efbcecdd3e5dfbf090341b485da9d176eb250d893e3eb378c428a2db38301ce
libvorbis_1.3.5-4ubuntu0.1.debian.tar.xz 11.4 KiB 6f0971078a330ea9ba30e7634934c28afa589e8f83a8a74d23b51c381fa32df3
libvorbis_1.3.5-4ubuntu0.1.dsc 2.4 KiB 2415569166f2d20bf7d3b05f6293c1be22ff43d5517a38fe9511e6fc65c0e777

View changes file

Binary packages built by this source

libvorbis-dbg: No summary available for libvorbis-dbg in ubuntu artful.

No description available for libvorbis-dbg in ubuntu artful.

libvorbis-dev: No summary available for libvorbis-dev in ubuntu artful.

No description available for libvorbis-dev in ubuntu artful.

libvorbis0a: No summary available for libvorbis0a in ubuntu artful.

No description available for libvorbis0a in ubuntu artful.

libvorbisenc2: No summary available for libvorbisenc2 in ubuntu artful.

No description available for libvorbisenc2 in ubuntu artful.

libvorbisfile3: No summary available for libvorbisfile3 in ubuntu artful.

No description available for libvorbisfile3 in ubuntu artful.