UbuntuUpdates.org

Package "libvorbis-dbg"

Name: libvorbis-dbg

Description:

The Vorbis General Audio Compression Codec (debug files)

Latest version: 1.3.2-1.3ubuntu1.2
Release: trusty (14.04)
Level: security
Repository: main
Head package: libvorbis

Links


Download "libvorbis-dbg"


Other versions of "libvorbis-dbg" in Trusty

Repository Area Version
base main 1.3.2-1.3ubuntu1
updates main 1.3.2-1.3ubuntu1.2

Changelog

Version: 1.3.2-1.3ubuntu1.2 2018-03-22 13:07:11 UTC

  libvorbis (1.3.2-1.3ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds write in codebook decoding
    - lib/codebook.c: fix codebook decoding.
    - CVE-2018-5146

 -- Marc Deslauriers <email address hidden> Wed, 21 Mar 2018 13:54:15 -0400

Source diff to previous version
CVE-2018-5146 out-of-bound write

Version: 1.3.2-1.3ubuntu1.1 2018-02-13 21:06:22 UTC

  libvorbis (1.3.2-1.3ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: Remote code execution
    - debian/patches/CVE-2017-14632.patch: don't clear opb in
      lib/info.c.
    - CVE-2017-14632
  * SECURITY UPDATE: out-of-bounds array read
    - debian/patches/CVE-2017-14633.patch: don't allow for more than
      256 channels in lib/info.c.
    - CVE-2017-14633

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 13 Feb 2018 12:48:25 -0300

CVE-2017-14632 Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi
CVE-2017-14633 In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS



About   -   Send Feedback to @ubuntu_updates