Ubuntu
mpg123 package

mpg123 1.16.0-1ubuntu1.1 source package in Ubuntu

Changelog

mpg123 (1.16.0-1ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow
    - debian/patches/CVE-2014-9497.patch: Regression fix: Ensure decoder
      reinitialization on combination of seek and resync (buffer
      overflow) and add check for bad bit allocation value in layer I
      decoder.
    - CVE-2014-9497
  * SECURITY UPDATE: Memory overread
    - debian/patches/CVE-2016-1000247.patch: fix DoS with crafted ID3v2
      tags.
    - CVE-2016-1000247
  * SECURITY UPDATE: Memory overread
    - debian/patches/CVE-2017-10683.patch: fix in id3.c
    - CVE-2017-10683

 -- Eduardo Barretto <email address hidden>  Tue, 04 Sep 2018 17:42:41 -0300

Upload details

Uploaded by:
Eduardo Barretto
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
sound
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates universe sound
Trusty security universe sound

Downloads

File Size SHA-256 Checksum
mpg123_1.16.0.orig.tar.bz2 823.1 KiB f00f72e385b522b8f05c9b1ed371abad438362620e6eb8164e2a99b79bb3f6d3
mpg123_1.16.0-1ubuntu1.1.debian.tar.gz 24.0 KiB 281dae09944cf27c6804c419b11bb8292e19cedbb87ff9c9e2a20b12c924d3de
mpg123_1.16.0-1ubuntu1.1.dsc 2.3 KiB d26b7ae9c3d4a004fd8c743bd5a0b02f067064ae1191103644cb1703564c16fd

View changes file

Binary packages built by this source

libmpg123-0: MPEG layer 1/2/3 audio decoder (shared library)

 mpg123 is a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers
 1, 2 and 3 (MPEG 1.0 layer 3 also known as MP3).
 .
 This package contains the C libraries needed to run executables that use
 the mpg123 library.

libmpg123-0-dbgsym: debug symbols for package libmpg123-0

 mpg123 is a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers
 1, 2 and 3 (MPEG 1.0 layer 3 also known as MP3).
 .
 This package contains the C libraries needed to run executables that use
 the mpg123 library.

libmpg123-dev: MPEG layer 1/2/3 audio decoder (development files)

 mpg123 is a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers
 1, 2 and 3 (MPEG 1.0 layer 3 also known as MP3).
 .
 This package contains the C development headers and library files needed
 to compile programs using the mpg123 library.

mpg123: MPEG layer 1/2/3 audio player

 mpg123 is a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers
 1, 2 and 3 (MPEG 1.0 layer 3 also known as MP3).
 .
 This package contains output plugins for several audio systems, including
 OSS4, the Advanced Linux Sound Architecture (ALSA), JACK, PortAudio,
 PulseAudio, OpenAL and the Network Audio System (NAS).

mpg123-dbgsym: debug symbols for package mpg123

 mpg123 is a real time MPEG 1.0/2.0/2.5 audio player/decoder for layers
 1, 2 and 3 (MPEG 1.0 layer 3 also known as MP3).
 .
 This package contains output plugins for several audio systems, including
 OSS4, the Advanced Linux Sound Architecture (ALSA), JACK, PortAudio,
 PulseAudio, OpenAL and the Network Audio System (NAS).