Change logs for libsndfile source package in Xenial

  • libsndfile (1.0.25-10ubuntu0.16.04.3) xenial-security; urgency=medium
    
      * SECURITY UPDATE: Heap-based buffer overflow
        - debian/patches/CVE-2017-12562.patch: Size buffer correctly in
          src/common.c to prevent buffer overflows.
        - CVE-2017-12562
    
     -- Avital Ostromich <email address hidden>  Thu, 14 Jan 2021 19:46:45 -0500
  • libsndfile (1.0.25-10ubuntu0.16.04.2) xenial-security; urgency=medium
    
      * SECURITY UPDATE: multiple security issues
        - debian/patches/*.patch: sync multiple security patches with 1.0.28-6.
        - CVE-2017-6892, CVE-2017-14245, CVE-2017-14246, CVE-2017-14634,
          CVE-2017-16942, CVE-2017-17456, CVE-2017-17457, CVE-2018-13139,
          CVE-2018-19432, CVE-2018-19661, CVE-2018-19662, CVE-2018-19758,
          CVE-2019-3832
    
     -- Marc Deslauriers <email address hidden>  Fri, 07 Jun 2019 14:35:20 -0400
  • libsndfile (1.0.25-10ubuntu0.16.04.1) xenial-security; urgency=medium
    
      * SECURITY UPDATE: multiple security issues
        - debian/patches/*: synchronize security fixes with Debian's
          1.0.25-9.1+deb7u2 release. Thanks!
        - CVE-2017-7585, CVE-2017-7586, CVE-2017-7741, CVE-2017-7742,
          CVE-2017-8361, CVE-2017-8362, CVE-2017-8363, CVE-2017-8365
    
     -- Marc Deslauriers <email address hidden>  Wed, 31 May 2017 09:38:37 -0400
  • libsndfile (1.0.25-10) unstable; urgency=low
    
      * debian/patches :
        - Add 02_sd2_buffer_read_overflow.diff (CVE-2014-9496, closes: #774162).
        - Add 03_file_io_divide_by_zero.diff (CVE-2014-9756, closes: #804447).
        - Add 04_fix_aiff_heap_overflow.diff (CVE-2015-7805, closes: #804445).
      * debian/control: Standards version 3.9.6. No changes needed.
    
     -- Erik de Castro Lopo <email address hidden>  Tue, 10 Nov 2015 20:36:47 +1100
  • libsndfile (1.0.25-9.1) unstable; urgency=high
    
    
      * Non-maintainer upload by the Security Team.
      * Fix CVE-2014-9496: buffer overread issues (closes: #774162).
    
     -- Michael Gilbert <email address hidden>  Mon, 26 Jan 2015 01:32:01 +0000