Format: 1.7
Date: Tue, 02 Mar 2010 15:59:08 +0200
Source: audiofile
Binary: libaudiofile-dev libaudiofile0 libaudiofile0-dbg
Architecture: amd64
Version: 0.2.6-7ubuntu1.8.04.1
Distribution: hardy
Urgency: low
Maintainer: Ubuntu/amd64 Build Daemon <buildd@yellow.buildd>
Changed-By: Stefan Lesicnik <stefan@lsd.lsd.co.za>
Description: 
 libaudiofile-dev - Open-source version of SGI's audiofile library (header files)
 libaudiofile0 - Open-source version of SGI's audiofile library
 libaudiofile0-dbg - Open-source version of SGI's audiofile library
Launchpad-Bugs-Fixed: 527033
Changes: 
 audiofile (0.2.6-7ubuntu1.8.04.1) hardy-security; urgency=low
 .
   * SECURITY UPDATE: Heap-based buffer overflow in msadpcm.c in libaudiofile
     in audiofile 0.2.6 allows context-dependent attackers to cause a denial
     of service (application crash) or possibly execute arbitrary code via a
     crafted WAV file.  (LP: #527033)
     - debian/patches/22_CVE-2008-5824.dpatch: Fix buffer overflow when
       decompressing MS ADPCM .wav files.
     - CVE-2008-5824
Files: 
 4edd68b979026eecd4cb8d9f12eeedb4 130162 libdevel optional libaudiofile-dev_0.2.6-7ubuntu1.8.04.1_amd64.deb
 accfd8919bfa855cc44cb4ff640fe85f 83116 libs optional libaudiofile0_0.2.6-7ubuntu1.8.04.1_amd64.deb
 47101ef13ef8a6d280f66d7f770491d2 170858 libdevel optional libaudiofile0-dbg_0.2.6-7ubuntu1.8.04.1_amd64.deb
Original-Maintainer: Daniel Kobras <kobras@debian.org>