Accepted libvorbis 1.1.2.dfsg-1.2ubuntu2 (source)

Ubuntu Installer archive at ubuntu.com
Thu Aug 16 01:55:46 BST 2007


Accepted:
 OK: libvorbis_1.1.2.dfsg.orig.tar.gz
 OK: libvorbis_1.1.2.dfsg-1.2ubuntu2.diff.gz
 OK: libvorbis_1.1.2.dfsg-1.2ubuntu2.dsc
     -> Component: main Section: libs

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Wed, 15 Aug 2007 14:05:07 -0700
Source: libvorbis
Binary: libvorbis0a libvorbis-dev libvorbisenc2 libvorbisfile3
Architecture: source
Version: 1.1.2.dfsg-1.2ubuntu2
Distribution: feisty-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Kees Cook <kees at ubuntu.com>
Description: 
 libvorbis-dev - The Vorbis General Audio Compression Codec (development files)
 libvorbis0a - The Vorbis General Audio Compression Codec
 libvorbisenc2 - The Vorbis General Audio Compression Codec
 libvorbisfile3 - The Vorbis General Audio Compression Codec
Changes: 
 libvorbis (1.1.2.dfsg-1.2ubuntu2) feisty-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary code execution via heap overflow
   * Add 100_heap_execution.patch: backported upstream changes from 1.2.0.
   * References
     CVE-2007-3106
     CVE-2007-4029
Files: 
 978e723bf7f45be6197bcdfbf889daf7 884 libs optional libvorbis_1.1.2.dfsg-1.2ubuntu2.dsc
 feb5fce1d4acf0bfdb35a37e1214bbb9 6434 libs optional libvorbis_1.1.2.dfsg-1.2ubuntu2.diff.gz
Original-Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGw5EkH/9LqRcGPm0RAp/rAKCWvRmmAw16ATUWNXyvAogue00UmQCfT5iW
8bIA1ZqKuaJ1Ky1/EX0jJ9c=
=7rcG
-----END PGP SIGNATURE-----





More information about the feisty-changes mailing list