Format: 1.8 Date: Wed, 27 Sep 2017 03:21:24 +0930 Source: mp3splt Binary: mp3splt mp3splt-gtk libmp3splt mp3splt-dbg Architecture: ppc64el Version: 2.6.2+20170630-2 Distribution: bionic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Ron Lee Description: libmp3splt - support library for mp3splt and mp3splt-gtk mp3splt - split MP3, Ogg Vorbis, or FLAC files without re-encoding mp3splt-dbg - debugging symbols for mp3splt, mp3splt-gtk and libmp3splt mp3splt-gtk - split MP3, Ogg Vorbis, or FLAC files without re-encoding Changes: mp3splt (2.6.2+20170630-2) unstable; urgency=medium . * Properly zero the ogg and vorbis state structures after they are malloc'd. This fixes the second issue that was indicated in CVE-2017-11333, which isn't actually the fault of libvorbis. It's caused by the libmp3splt ogg plugin unwinding when the error in the test file is detected, and calling vorbis_block_clear() on an uninitialised vorbis_block struct before the call to vorbis_block_init() occurs. Similar things would go badly for the other uninitialised structs if this one didn't explode first. Checksums-Sha1: 99e1a9898474d00025950a824f63436bea46433c 295272 libmp3splt_0.9.2-2_ppc64el.deb 01053d3926599b5d6db10e410b7052beda6687a0 625892 mp3splt-dbg_2.6.2+20170630-2_ppc64el.deb 616c125406cae2d15a174153914c8be722357d49 429456 mp3splt-gtk_0.9.2-2_ppc64el.deb f6ece37273f9555e3569dcc0e16d99b41b380048 19258 mp3splt_2.6.2+20170630-2_ppc64el.buildinfo f0f9c3dcc6abb1a4e585c59c1fe7727f5b30f313 41528 mp3splt_2.6.2+20170630-2_ppc64el.deb Checksums-Sha256: daf2fd5e4a20963e0b9bef4685c2a8b6f1132c3a3182c4c38566938cfc71cc3d 295272 libmp3splt_0.9.2-2_ppc64el.deb 108d03ac922a7159a301e420668b5ad7ae62d08bcbc80f2a931c659f15954361 625892 mp3splt-dbg_2.6.2+20170630-2_ppc64el.deb f021eced58bd3e991e74d4cc818fe84e9f33888da3a58d85e5b9771d37bcf4aa 429456 mp3splt-gtk_0.9.2-2_ppc64el.deb be38f3c5f0d3aaee991584eb85acf38265eaed5d7dbcb3ef9bd3bc0f23a5a267 19258 mp3splt_2.6.2+20170630-2_ppc64el.buildinfo e6079461aa22600c21a4859db9caf027be890e0f62872a4b25a285b972bba293 41528 mp3splt_2.6.2+20170630-2_ppc64el.deb Files: a253f143957cdde87d01e23a6fc1c51d 295272 libs optional libmp3splt_0.9.2-2_ppc64el.deb 45550f47b82f5e0102ddccbf788e7daf 625892 debug extra mp3splt-dbg_2.6.2+20170630-2_ppc64el.deb ed7e17a4bfa6297863521861a5c75198 429456 sound optional mp3splt-gtk_0.9.2-2_ppc64el.deb 492911556c0df12ade3daff7b9ce24fc 19258 sound optional mp3splt_2.6.2+20170630-2_ppc64el.buildinfo 2dc9dc6fc429149ff921550f30ffd86a 41528 sound optional mp3splt_2.6.2+20170630-2_ppc64el.deb