[ubuntu/lucid] libvorbis 1.2.3-3ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Fri Feb 26 15:50:39 GMT 2010


libvorbis (1.2.3-3ubuntu1) lucid; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    multiple vulnerabilities
    - debian/patches/CVE-2009-3379.patch: add a couple of missing commits:
      eliminate blocklist overflow in lib/backends.h, don't allow codeword
      lengths longer than 32 bits in lib/codebook.c.
    - CVE-2009-3379
  * debian/rules, debian/control: add quilt patch system

Date: Fri, 26 Feb 2010 10:22:23 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/libvorbis/1.2.3-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 26 Feb 2010 10:22:23 -0500
Source: libvorbis
Binary: libvorbis0a libvorbisenc2 libvorbisfile3 libvorbis-dev libvorbis-dbg
Architecture: source
Version: 1.2.3-3ubuntu1
Distribution: lucid
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libvorbis-dbg - The Vorbis General Audio Compression Codec (debug files)
 libvorbis-dev - The Vorbis General Audio Compression Codec (development files)
 libvorbis0a - The Vorbis General Audio Compression Codec (Decoder library)
 libvorbisenc2 - The Vorbis General Audio Compression Codec (Encoder library)
 libvorbisfile3 - The Vorbis General Audio Compression Codec (High Level API)
Changes: 
 libvorbis (1.2.3-3ubuntu1) lucid; urgency=low
 .
   * SECURITY UPDATE: denial of service and possible code execution via
     multiple vulnerabilities
     - debian/patches/CVE-2009-3379.patch: add a couple of missing commits:
       eliminate blocklist overflow in lib/backends.h, don't allow codeword
       lengths longer than 32 bits in lib/codebook.c.
     - CVE-2009-3379
   * debian/rules, debian/control: add quilt patch system
Checksums-Sha1: 
 672da0317ce650abccabc404bed175405d1891f1 1351 libvorbis_1.2.3-3ubuntu1.dsc
 e50f32695799ecdee94d39b1be42253f8c0915c4 8306 libvorbis_1.2.3-3ubuntu1.diff.gz
Checksums-Sha256: 
 e408613a70a6c774e4fafe8bdb8e95617836d12a2a7d598015d5a8c5e3adbf9c 1351 libvorbis_1.2.3-3ubuntu1.dsc
 64957f5f9c7245a984424c1a2ad54819a8cb81c5bc5be4b89d29013791338476 8306 libvorbis_1.2.3-3ubuntu1.diff.gz
Files: 
 9196681a03ac3076dd11aecfca05d866 1351 libs optional libvorbis_1.2.3-3ubuntu1.dsc
 44a93f2c46e8a8246685b65d5bb97255 8306 libs optional libvorbis_1.2.3-3ubuntu1.diff.gz
Original-Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAkuH7TsACgkQLMAs/0C4zNrJuwCghnNI3gw3FL5KY3b4/gZgm1rM
NAoAoIj7NbAPkuKYcadVVij61hmrxwff
=7AB3
-----END PGP SIGNATURE-----


More information about the Lucid-changes mailing list