[ubuntu/artful-updates] libvorbis 1.3.5-4ubuntu0.1 (Accepted)

Tue Feb 13 19:58:10 UTC 2018

libvorbis (1.3.5-4ubuntu0.1) artful-security; urgency=medium

  * SECURITY UPDATE: Remote code execution
    - debian/patches/CVE-2017-14632.patch: don't clear opb in
      lib/info.c.
    - CVE-2017-14632
  * SECURITY UPDATE: out-of-bounds array read
    - debian/patches/CVE-2017-14633.patch: don't allow for more than
      256 channels in lib/info.c.
    - CVE-2017-14633

Date: 2018-02-13 17:32:20.427055+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/libvorbis/1.3.5-4ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.