[ubuntu/maverick-security] libsndfile 1.0.21-2ubuntu0.10.10.1 (Accepted)

[Jamie Strandboge]

libsndfile (1.0.21-2ubuntu0.10.10.1) maverick-security; urgency=low

  * SECURITY UPDATE: integer overflow leading to heap-based overflow
    - debian/CVE-2011-2696.patch: verify paf header length and paf channels
    - CVE-2011-2696

Date: Thu, 21 Jul 2011 15:33:45 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/maverick/+source/libsndfile/1.0.21-2ubuntu0.10.10.1
-------------- next part --------------
Format: 1.8
Date: Thu, 21 Jul 2011 15:33:45 -0500
Source: libsndfile
Binary: libsndfile1-dev libsndfile1 sndfile-programs
Architecture: source
Version: 1.0.21-2ubuntu0.10.10.1
Distribution: maverick-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 libsndfile1 - Library for reading/writing audio files
 libsndfile1-dev - Development files for libsndfile; a library for reading/writing a
 sndfile-programs - Sample programs that use libsndfile
Changes: 
 libsndfile (1.0.21-2ubuntu0.10.10.1) maverick-security; urgency=low
 .
   * SECURITY UPDATE: integer overflow leading to heap-based overflow
     - debian/CVE-2011-2696.patch: verify paf header length and paf channels
     - CVE-2011-2696
Checksums-Sha1: 
 6b57fa55bf7b71ff85867b05565453997f2e538c 2027 libsndfile_1.0.21-2ubuntu0.10.10.1.dsc
 543b7f36fab36617c495944e5a304cd67dd17709 10098 libsndfile_1.0.21-2ubuntu0.10.10.1.diff.gz
Checksums-Sha256: 
 9e017d34754a691ce9a752a2eff209950d2e000cf80505e82977b5f804ef8987 2027 libsndfile_1.0.21-2ubuntu0.10.10.1.dsc
 e91a1ca86fca970394f25229991ef6167c6f6eed1557748478f56e856906f6a5 10098 libsndfile_1.0.21-2ubuntu0.10.10.1.diff.gz
Files: 
 8f16e1a6e7fce02805cfe8e2684aa15c 2027 devel optional libsndfile_1.0.21-2ubuntu0.10.10.1.dsc
 039d042349f4437d90d5ca0fdb217a35 10098 devel optional libsndfile_1.0.21-2ubuntu0.10.10.1.diff.gz
Original-Maintainer: Erik de Castro Lopo <erikd at mega-nerd.com>