Format: 1.7
Date: Tue, 02 Mar 2010 15:59:08 +0200
Source: audiofile
Binary: libaudiofile-dev libaudiofile0 libaudiofile0-dbg
Architecture: hppa
Version: 0.2.6-7ubuntu1.8.04.1
Distribution: hardy
Urgency: low
Maintainer: Ubuntu/hppa Build Daemon <buildd@kohnen.buildd>
Changed-By: Stefan Lesicnik <stefan@lsd.lsd.co.za>
Description: 
 libaudiofile-dev - Open-source version of SGI's audiofile library (header files)
 libaudiofile0 - Open-source version of SGI's audiofile library
 libaudiofile0-dbg - Open-source version of SGI's audiofile library
Launchpad-Bugs-Fixed: 527033
Changes: 
 audiofile (0.2.6-7ubuntu1.8.04.1) hardy-security; urgency=low
 .
   * SECURITY UPDATE: Heap-based buffer overflow in msadpcm.c in libaudiofile
     in audiofile 0.2.6 allows context-dependent attackers to cause a denial
     of service (application crash) or possibly execute arbitrary code via a
     crafted WAV file.  (LP: #527033)
     - debian/patches/22_CVE-2008-5824.dpatch: Fix buffer overflow when
       decompressing MS ADPCM .wav files.
     - CVE-2008-5824
Files: 
 eeba51c765bf32f401ffed39d073e41c 138748 libdevel optional libaudiofile-dev_0.2.6-7ubuntu1.8.04.1_hppa.deb
 8835377d8813633fd07dd8ea884c86a1 91564 libs optional libaudiofile0_0.2.6-7ubuntu1.8.04.1_hppa.deb
 6e4c0d6a4c57359a34d8038d954163e5 165678 libdevel optional libaudiofile0-dbg_0.2.6-7ubuntu1.8.04.1_hppa.deb
Original-Maintainer: Daniel Kobras <kobras@debian.org>