[ubuntu/trusty-security] flac 1.3.0-2ubuntu0.14.04.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Nov 27 18:53:29 UTC 2014
flac (1.3.0-2ubuntu0.14.04.1) trusty-security; urgency=medium
* SECURITY UPDATE: arbitrary code execution via crafted .flac file
- debian/patches/CVE-2014-8962.patch: validate id in
src/libFLAC/stream_decoder.c.
- CVE-2014-8962
* SECURITY UPDATE: arbitrary code execution via crafted .flac file
- debian/patches/CVE-2014-9028.patch: error out to avoid heap overflow
in src/libFLAC/stream_decoder.c.
- CVE-2014-9028
Date: 2014-11-27 18:02:37.709756+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/flac/1.3.0-2ubuntu0.14.04.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Trusty-changes
mailing list