Format: 1.7
Date: Tue, 02 Mar 2010 15:59:08 +0200
Source: audiofile
Binary: libaudiofile-dev libaudiofile0 libaudiofile0-dbg
Architecture: ia64
Version: 0.2.6-7ubuntu1.8.04.1
Distribution: hardy
Urgency: low
Maintainer: Ubuntu/ia64 Build Daemon <buildd@hooker.buildd>
Changed-By: Stefan Lesicnik <stefan@lsd.lsd.co.za>
Description: 
 libaudiofile-dev - Open-source version of SGI's audiofile library (header files)
 libaudiofile0 - Open-source version of SGI's audiofile library
 libaudiofile0-dbg - Open-source version of SGI's audiofile library
Launchpad-Bugs-Fixed: 527033
Changes: 
 audiofile (0.2.6-7ubuntu1.8.04.1) hardy-security; urgency=low
 .
   * SECURITY UPDATE: Heap-based buffer overflow in msadpcm.c in libaudiofile
     in audiofile 0.2.6 allows context-dependent attackers to cause a denial
     of service (application crash) or possibly execute arbitrary code via a
     crafted WAV file.  (LP: #527033)
     - debian/patches/22_CVE-2008-5824.dpatch: Fix buffer overflow when
       decompressing MS ADPCM .wav files.
     - CVE-2008-5824
Files: 
 667a6ff296e2a7661531c7541dc1fa62 171696 libdevel optional libaudiofile-dev_0.2.6-7ubuntu1.8.04.1_ia64.deb
 d96f2407712a730d40ead5b9dc5ac575 114246 libs optional libaudiofile0_0.2.6-7ubuntu1.8.04.1_ia64.deb
 e80f17c711a30a112880f3c05f45985a 164570 libdevel optional libaudiofile0-dbg_0.2.6-7ubuntu1.8.04.1_ia64.deb
Original-Maintainer: Daniel Kobras <kobras@debian.org>