[ubuntu/lucid-security] libsndfile 1.0.21-2ubuntu0.10.04.1 (Accepted)
Jamie Strandboge
jamie at ubuntu.com
Mon Jul 25 23:03:47 UTC 2011
libsndfile (1.0.21-2ubuntu0.10.04.1) lucid-security; urgency=low
* SECURITY UPDATE: integer overflow leading to heap-based overflow
- debian/CVE-2011-2696.patch: verify paf header length and paf channels
- CVE-2011-2696
Date: Thu, 21 Jul 2011 15:33:45 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/libsndfile/1.0.21-2ubuntu0.10.04.1
-------------- next part --------------
Format: 1.8
Date: Thu, 21 Jul 2011 15:33:45 -0500
Source: libsndfile
Binary: libsndfile1-dev libsndfile1 sndfile-programs
Architecture: source
Version: 1.0.21-2ubuntu0.10.04.1
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
libsndfile1 - Library for reading/writing audio files
libsndfile1-dev - Development files for libsndfile; a library for reading/writing a
sndfile-programs - Sample programs that use libsndfile
Changes:
libsndfile (1.0.21-2ubuntu0.10.04.1) lucid-security; urgency=low
.
* SECURITY UPDATE: integer overflow leading to heap-based overflow
- debian/CVE-2011-2696.patch: verify paf header length and paf channels
- CVE-2011-2696
Checksums-Sha1:
1ee458e11bb14f9f5d0e62d072411ba7975098f0 2027 libsndfile_1.0.21-2ubuntu0.10.04.1.dsc
6adf3eb743cdb9a44a472af73a034c48ca84a0bd 10008 libsndfile_1.0.21-2ubuntu0.10.04.1.diff.gz
Checksums-Sha256:
246eac38f17ed8cc23b2c39344b1571e7745ae0ba53817f4165b17bf33f65c77 2027 libsndfile_1.0.21-2ubuntu0.10.04.1.dsc
3826d1fed66d895ddc21bee617d87f28f0ecc66bb337f0caf8634d76362b00ef 10008 libsndfile_1.0.21-2ubuntu0.10.04.1.diff.gz
Files:
918576cecb2f45a36b178ac7ca95ec9a 2027 devel optional libsndfile_1.0.21-2ubuntu0.10.04.1.dsc
e832f09bc6bb52ddf28bd472ec4d544b 10008 devel optional libsndfile_1.0.21-2ubuntu0.10.04.1.diff.gz
Original-Maintainer: Erik de Castro Lopo <erikd at mega-nerd.com>
More information about the Lucid-changes
mailing list