Format: 1.7 Date: Wed, 06 May 2009 15:34:51 -0400 Source: libmodplug Binary: libmodplug0c2 libmodplug-dev Architecture: powerpc Version: 1:0.7-7ubuntu0.8.04.1 Distribution: hardy Urgency: low Maintainer: Ubuntu/powerpc Build Daemon Changed-By: Marc Deslauriers Description: libmodplug-dev - development files for mod music based on ModPlug libmodplug0c2 - shared libraries for mod music based on ModPlug Changes: libmodplug (1:0.7-7ubuntu0.8.04.1) hardy-security; urgency=low . * SECURITY UPDATE: code execution via integer overflow in CSoundFile::ReadMed - src/load_med.cpp: check for overflow in song comment and song name. Make sure strings are properly NULL-terminated. - http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.1&r2=1.2 - http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_med.cpp?r1=1.2&r2=1.3 - CVE-2009-1438 Files: 0b1e05f93b5e85f57566874861640083 131908 sound optional libmodplug0c2_0.7-7ubuntu0.8.04.1_powerpc.deb Original-Maintainer: Zed Pobre