Format: 1.8
Date: Fri, 14 Oct 2011 13:43:02 -0400
Source: libmodplug
Binary: libmodplug1 libmodplug-dev
Architecture: all i386
Version: 1:0.8.8.1-1ubuntu1.3
Distribution: maverick
Urgency: low
Maintainer: Ubuntu/i386 Build Daemon <buildd@rothera.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 libmodplug-dev - development files for mod music based on ModPlug
 libmodplug1 - shared libraries for mod music based on ModPlug
Changes: 
 libmodplug (1:0.8.8.1-1ubuntu1.3) maverick-security; urgency=low
 .
   * SECURITY UPDATE: integer overflow in CSoundFile::ReadWav()
     - properly calculate length in src/load_wav.cpp.
     - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=2d4c56de314ab13e4437bd8b609f0b751066eee8
     - CVE-2011-2911
   * SECURITY UPDATE: boundary error in CSoundFile::ReadS3M()
     - validate offsets and ignore duplicate samples in src/load_s3m.cpp.
     - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=4e5295658fff000379caa122e75c9200205fe20
     - CVE-2011-2912
   * SECURITY UPDATE: off-by-one in CSoundFile::ReadAMS()
     - fix calculation in src/load_ams.cpp.
     - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef
     - CVE-2011-2913
   * SECURITY UPDATE: off-by-one in CSoundFile::ReadDSM()
     - fix calculation in src/load_dsm.cpp.
     - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef
     - CVE-2011-2914
   * SECURITY UPDATE: off-by-one in CSoundFile::ReadAMS2()
     - fix calculation in src/load_ams.cpp.
     - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=16d7a78efe14d345a6c5b241f88422ad0ee483ea
     - CVE-2011-2915
Checksums-Sha1: 
 3253b4d08792e2855db3081f6d148d1e6bf7974a 27966 libmodplug-dev_0.8.8.1-1ubuntu1.3_all.deb
 c465b225126dcfca7a5c5c0d903dc7cbe6e79825 173484 libmodplug1_0.8.8.1-1ubuntu1.3_i386.deb
Checksums-Sha256: 
 866f4710b05e1eeb15a69afa2c33d42e60486b54befa09a274c71d1649120b56 27966 libmodplug-dev_0.8.8.1-1ubuntu1.3_all.deb
 d71f1c0c0a80a420dc1256f26f4c24eeec98d43cdb0433d2a7dc8d343f834700 173484 libmodplug1_0.8.8.1-1ubuntu1.3_i386.deb
Files: 
 4f568aee5083df5c3a6fbeba11a83931 27966 libdevel optional libmodplug-dev_0.8.8.1-1ubuntu1.3_all.deb
 369159fd6ac920e27e8ed54382e150ce 173484 libs optional libmodplug1_0.8.8.1-1ubuntu1.3_i386.deb
Original-Maintainer: Zed Pobre <zed@debian.org>