Format: 1.8
Date: Thu, 12 Nov 2009 15:02:17 -0500
Source: libvorbis
Binary: libvorbis0a libvorbisenc2 libvorbisfile3 libvorbis-dev
Architecture: powerpc
Version: 1.2.0.dfsg-6ubuntu0.1
Distribution: karmic
Urgency: low
Maintainer: Ubuntu/powerpc Build Daemon <buildd@ross.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 libvorbis-dev - The Vorbis General Audio Compression Codec: development files
 libvorbis0a - The Vorbis General Audio Compression Codec: decoder library
 libvorbisenc2 - The Vorbis General Audio Compression Codec: encoder library
 libvorbisfile3 - The Vorbis General Audio Compression Codec: high-level API
Changes: 
 libvorbis (1.2.0.dfsg-6ubuntu0.1) karmic-security; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible code execution via
     multiple vulnerabilities
     - debian/patches/CVE-2009-3379.patch: Don't try to read past the end of
       the comment packet if the string lengths are corrupt in lib/info.c,
       check for premature EOP in lib/res0.c, implement hardening in
       lib/{codebook,floor1,info,mapping0}.c, eliminate blocklist overflow
       in lib/backends.h, don't allow codeword lengths longer than 32 bits
       in lib/codebook.c.
     - CVE-2009-3379
   * SECURITY UPDATE: code execution via heap overflow in residue partition
     value (LP: #232150)
     - debian/patches/CVE-2008-1420-2.patch: add additional checks to fix
       issue, but still maintain backwards compatibility in lib/res0.c,
       lib/modes/{residue_44u,residue_44}.h, lib/backends.h.
     - CVE-2008-1420
Checksums-Sha1: 
 6751a33c602abfc606a006f34bee6b0f0b7c5277 113120 libvorbis0a_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 b19d45d349a9b5a69a4c737796407afea1a83272 84114 libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 3fc8f462bc56d4a6daabb354dc03f0e0d15e9950 23840 libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 cc3ef89c8beea381c2bc3cb8e420a55142383932 491998 libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Checksums-Sha256: 
 1943b73804677a966e2e6224962cab9fef21d10537d02680900b78a22686ec0e 113120 libvorbis0a_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 9cfb44ff8e44135bd0d22c7cdfa0c06ad7bccf1d3ec40f3ac607f19fc2ae46f4 84114 libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 e9aca5194df60d916cd2092dbba2b345d0bbbd392d6156bb69a4524bc364eefd 23840 libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 8564d3492ba964d2a87e58c963214760fa525ce693e4f127aa0d1efa9e86871e 491998 libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Files: 
 3d8780b8b7983e7dac75c021a53a6b9d 113120 libs optional libvorbis0a_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 a03a7b5b903cd91a3f9ac799ea3c8b91 84114 libs optional libvorbisenc2_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 56dda24b70b6717c7117bbec29d4e3fe 23840 libs optional libvorbisfile3_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
 f7edf9891a62bdaf437d24c012c0995a 491998 libdevel optional libvorbis-dev_1.2.0.dfsg-6ubuntu0.1_powerpc.deb
Launchpad-Bugs-Fixed: 232150
Original-Maintainer: Peter Samuelson <peter@p12n.org>