[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-05-07 Thread Sergio Zanchetta
The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life - http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the Gutsy task. ** Changed in: libannodex (Ubuntu Gutsy) Status: Confirmed => Won't Fix ** Changed in: libfishsound (Ubuntu Gutsy)

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-01-23 Thread Kees Cook
** Changed in: xmms-speex (Ubuntu Gutsy) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Dapper) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Gutsy) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Hardy) Status: New => Confirmed **

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-01-23 Thread Kees Cook
** Changed in: libannodex (Ubuntu) Status: New => Confirmed ** Changed in: libfishsound (Ubuntu) Status: New => Confirmed ** Changed in: libsdl-sound1.2 (Ubuntu) Status: New => Confirmed ** Changed in: sweep (Ubuntu) Status: New => Confirmed -- CVE-2008-1686: Multip

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-27 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/dapper/vorbis-tools/dapper- security ** Branch linked: lp:~ubuntu-branches/ubuntu/feisty/vorbis-tools/feisty- security ** Branch linked: lp:~ubuntu-branches/ubuntu/gutsy/vorbis-tools/gutsy- security ** Branch linked: lp:~ubuntu-branches/ubuntu/hardy/v

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-27 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/dapper/speex/dapper- security ** Branch linked: lp:ubuntu/feisty-updates/speex ** Branch linked: lp:~ubuntu-branches/ubuntu/hardy/speex/hardy-security ** Branch linked: lp:~ubuntu-branches/ubuntu/gutsy/speex/gutsy-security -- CVE-2008-1686: Multiple

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-28 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic/xine-lib -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-12-14 Thread Hew McLachlan
Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix. ** Changed in: libannodex (Ubuntu Feisty) Status: New => Won't Fix ** Changed in: libfishsound (Ubuntu Feisty) Status: New => Won't Fix ** Changed in: libsdl-sound1

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-08 Thread Reinhard Tartler
new upstream (1.1.14) fixing this issue is prepared. ** Changed in: xine-lib (Ubuntu) Assignee: (unassigned) => Reinhard Tartler (siretart) Status: New => Fix Committed -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/21865

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-12 Thread Launchpad Bug Tracker
This bug was fixed in the package xine-lib - 1.1.14-1ubuntu1 --- xine-lib (1.1.14-1ubuntu1) intrepid; urgency=low * merge from debian unstable. Remaining changes: - disable the jack plugin in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Mainta

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-12 Thread William Grant
** Changed in: vlc (Ubuntu) Assignee: (unassigned) => William Grant (wgrant) Status: New => Fix Released ** Changed in: vlc (Ubuntu Hardy) Assignee: (unassigned) => William Grant (wgrant) Status: New => In Progress -- CVE-2008-1686: Multiple speex implementations insuffic

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-09 Thread William Grant
** Changed in: vlc (Ubuntu Hardy) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubun

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-19 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-23 Thread William Grant
VLC patch at http://trac.videolan.org/vlc/changeset/c1c81073e661f7d80197711ab11753e1e170b44c. -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is s

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
** Changed in: xine-lib (Ubuntu Dapper) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Feisty) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Gutsy) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Hardy) St

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
Debian fixed this in 1.2.0-2, and Intrepid now has 1.2.0-5 ** Changed in: vorbis-tools (Ubuntu) Status: Confirmed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
My last comment was for vorbis-tools. -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubunt

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-02 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-611-1 ** Changed in: speex (Ubuntu Dapper) Status: Fix Committed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member o

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-02 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-611-2 ** Changed in: vorbis-tools (Ubuntu Dapper) Status: Fix Committed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a m

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Adam Buchbinder
** Bug watch added: Gentoo Bugzilla #217715 http://bugs.gentoo.org/show_bug.cgi?id=217715 ** Also affects: speex (Gentoo Linux) via http://bugs.gentoo.org/show_bug.cgi?id=217715 Importance: Unknown Status: Unknown ** Bug watch added: Red Hat Bugzilla #441239 https://bugzilla.re

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Bug Watch Updater
** Changed in: speex (Gentoo Linux) Status: Unknown => Fix Released ** Changed in: speex (Fedora) Status: Unknown => In Progress ** Changed in: vorbis-tools Status: Unknown => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https:/

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Adam Buchbinder
** Bug watch added: Xine Bugzilla #83 http://bugs.xine-project.org/show_bug.cgi?id=83 ** Also affects: xine-lib via http://bugs.xine-project.org/show_bug.cgi?id=83 Importance: Unknown Status: Unknown -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks ht

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Bug Watch Updater
** Changed in: xine-lib Status: Unknown => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubunt

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-18 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-19 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: Fix Released => In Progress -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: gst-plugins-good0.10 (Ubuntu Dapper) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: gst-plugins-good0.10 (Ubuntu Feisty) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Chan

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: xine-lib (Ubuntu Dapper) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: xine-lib (Ubuntu Feisty) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: xine-lib (Ubuntu

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: gst-plugins-good0.10 (Ubuntu Dapper) Importance: Undecided => Medium Status: In Progress => Fix Committed ** Changed in: gst-plugins-good0.10 (Ubuntu Feisty) Importance: Undecided => Medium Status: In Progress => Fix Committed ** Changed in: gst-plugins-good0.10

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
1.2~beta3.2-1 in Intrepid is not affected. ** Changed in: speex (Ubuntu) Status: New => Invalid ** Changed in: vorbis-tools (Ubuntu Dapper) Importance: Undecided => Medium Status: In Progress => Fix Committed ** Changed in: vorbis-tools (Ubuntu Feisty) Importance: Undecided =

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
gst-plugins-good0.10.8 is not affected despite oCERT advisory. From ChangeLog: 2008-04-11 Jan Schmidt <[EMAIL PROTECTED]> * ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header): Fix bounds checking of mode in Speex header, which may produce negative numbers in speex <

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package speex - 1.1.12-3ubuntu0.8.04.1 --- speex (1.1.12-3ubuntu0.8.04.1) hardy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * fix for libspeex/speex_header.c to properly validate its input * References CVE-2008-1

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package speex - 1.1.12-3ubuntu0.7.10.1 --- speex (1.1.12-3ubuntu0.7.10.1) gutsy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * fix for libspeex/speex_header.c to properly validate its input * References CVE-2008-1

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package speex - 1.1.12-3ubuntu0.7.04.1 --- speex (1.1.12-3ubuntu0.7.04.1) feisty-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * fix for libspeex/speex_header.c to properly validate its input * References CVE-2008-

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package vorbis-tools - 1.1.1-15ubuntu0.1 --- vorbis-tools (1.1.1-15ubuntu0.1) hardy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c to properl

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package vorbis-tools - 1.1.1-13ubuntu0.1 --- vorbis-tools (1.1.1-13ubuntu0.1) gutsy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c to properl

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package vorbis-tools - 1.1.1-6ubuntu0.1 --- vorbis-tools (1.1.1-6ubuntu0.1) feisty-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c to properly

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package gst-plugins-good0.10 - 0.10.7-3ubuntu0.1 --- gst-plugins-good0.10 (0.10.7-3ubuntu0.1) hardy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/99_SECURITY_CVE-2008-1686.patch: fix for ext/speex/gs

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package gst-plugins-good0.10 - 0.10.6-0ubuntu4.1 --- gst-plugins-good0.10 (0.10.6-0ubuntu4.1) gutsy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/04_SECURITY_CVE-2008-1686.patch: fix for ext/speex/gs

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package gst-plugins-good0.10 - 0.10.5-1ubuntu2.1 --- gst-plugins-good0.10 (0.10.5-1ubuntu2.1) feisty-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/02_SECURITY_CVE-2008-1686.patch: fix for ext/speex/g

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-02 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-611-1 ** Changed in: speex (Ubuntu Dapper) Status: Fix Committed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member o

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-02 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-611-2 ** Changed in: vorbis-tools (Ubuntu Dapper) Status: Fix Committed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a m

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-12 Thread Launchpad Bug Tracker
This bug was fixed in the package xine-lib - 1.1.14-1ubuntu1 --- xine-lib (1.1.14-1ubuntu1) intrepid; urgency=low * merge from debian unstable. Remaining changes: - disable the jack plugin in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Mainta

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-12 Thread William Grant
** Changed in: vlc (Ubuntu) Assignee: (unassigned) => William Grant (wgrant) Status: New => Fix Released ** Changed in: vlc (Ubuntu Hardy) Assignee: (unassigned) => William Grant (wgrant) Status: New => In Progress -- CVE-2008-1686: Multiple speex implementations insuffic

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-08 Thread Reinhard Tartler
new upstream (1.1.14) fixing this issue is prepared. ** Changed in: xine-lib (Ubuntu) Assignee: (unassigned) => Reinhard Tartler (siretart) Status: New => Fix Committed -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/21865

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
** Changed in: xine-lib (Ubuntu Dapper) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Feisty) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Gutsy) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Hardy) St

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
Debian fixed this in 1.2.0-2, and Intrepid now has 1.2.0-5 ** Changed in: vorbis-tools (Ubuntu) Status: Confirmed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
My last comment was for vorbis-tools. -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubunt

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-09 Thread William Grant
** Changed in: vlc (Ubuntu Hardy) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubun

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-12-14 Thread Hew McLachlan
Ubuntu Feisty Fawn is no longer supported, so a SRU will not be issued for this release. Marking Feisty as Won't Fix. ** Changed in: libannodex (Ubuntu Feisty) Status: New => Won't Fix ** Changed in: libfishsound (Ubuntu Feisty) Status: New => Won't Fix ** Changed in: libsdl-sound1

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-18 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-19 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: Fix Released => In Progress -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: gst-plugins-good0.10 (Ubuntu Dapper) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: gst-plugins-good0.10 (Ubuntu Feisty) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Chan

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: xine-lib (Ubuntu Dapper) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: xine-lib (Ubuntu Feisty) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: xine-lib (Ubuntu

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: gst-plugins-good0.10 (Ubuntu Dapper) Importance: Undecided => Medium Status: In Progress => Fix Committed ** Changed in: gst-plugins-good0.10 (Ubuntu Feisty) Importance: Undecided => Medium Status: In Progress => Fix Committed ** Changed in: gst-plugins-good0.10

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
1.2~beta3.2-1 in Intrepid is not affected. ** Changed in: speex (Ubuntu) Status: New => Invalid ** Changed in: vorbis-tools (Ubuntu Dapper) Importance: Undecided => Medium Status: In Progress => Fix Committed ** Changed in: vorbis-tools (Ubuntu Feisty) Importance: Undecided =

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
gst-plugins-good0.10.8 is not affected despite oCERT advisory. From ChangeLog: 2008-04-11 Jan Schmidt <[EMAIL PROTECTED]> * ext/speex/gstspeexdec.c: (speex_dec_chain_parse_header): Fix bounds checking of mode in Speex header, which may produce negative numbers in speex <

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package speex - 1.1.12-3ubuntu0.8.04.1 --- speex (1.1.12-3ubuntu0.8.04.1) hardy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * fix for libspeex/speex_header.c to properly validate its input * References CVE-2008-1

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package speex - 1.1.12-3ubuntu0.7.10.1 --- speex (1.1.12-3ubuntu0.7.10.1) gutsy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * fix for libspeex/speex_header.c to properly validate its input * References CVE-2008-1

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package speex - 1.1.12-3ubuntu0.7.04.1 --- speex (1.1.12-3ubuntu0.7.04.1) feisty-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * fix for libspeex/speex_header.c to properly validate its input * References CVE-2008-

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package vorbis-tools - 1.1.1-15ubuntu0.1 --- vorbis-tools (1.1.1-15ubuntu0.1) hardy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c to properl

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package vorbis-tools - 1.1.1-13ubuntu0.1 --- vorbis-tools (1.1.1-13ubuntu0.1) gutsy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c to properl

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package vorbis-tools - 1.1.1-6ubuntu0.1 --- vorbis-tools (1.1.1-6ubuntu0.1) feisty-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/SECURITY_CVE-2008-1686.diff: fix for ogg123/speex_format.c to properly

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package gst-plugins-good0.10 - 0.10.7-3ubuntu0.1 --- gst-plugins-good0.10 (0.10.7-3ubuntu0.1) hardy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/99_SECURITY_CVE-2008-1686.patch: fix for ext/speex/gs

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package gst-plugins-good0.10 - 0.10.6-0ubuntu4.1 --- gst-plugins-good0.10 (0.10.6-0ubuntu4.1) gutsy-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/04_SECURITY_CVE-2008-1686.patch: fix for ext/speex/gs

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-08 Thread Launchpad Bug Tracker
This bug was fixed in the package gst-plugins-good0.10 - 0.10.5-1ubuntu2.1 --- gst-plugins-good0.10 (0.10.5-1ubuntu2.1) feisty-security; urgency=low * SECURITY UPDATE: array index vulnerability (LP: #218652) * debian/patches/02_SECURITY_CVE-2008-1686.patch: fix for ext/speex/g

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-19 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-23 Thread William Grant
VLC patch at http://trac.videolan.org/vlc/changeset/c1c81073e661f7d80197711ab11753e1e170b44c. -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is s

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Adam Buchbinder
** Bug watch added: Gentoo Bugzilla #217715 http://bugs.gentoo.org/show_bug.cgi?id=217715 ** Also affects: speex (Gentoo Linux) via http://bugs.gentoo.org/show_bug.cgi?id=217715 Importance: Unknown Status: Unknown ** Bug watch added: Red Hat Bugzilla #441239 https://bugzilla.re

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Bug Watch Updater
** Changed in: speex (Gentoo Linux) Status: Unknown => Fix Released ** Changed in: speex (Fedora) Status: Unknown => In Progress ** Changed in: vorbis-tools Status: Unknown => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https:/

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Adam Buchbinder
** Bug watch added: Xine Bugzilla #83 http://bugs.xine-project.org/show_bug.cgi?id=83 ** Also affects: xine-lib via http://bugs.xine-project.org/show_bug.cgi?id=83 Importance: Unknown Status: Unknown -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks ht

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Bug Watch Updater
** Changed in: xine-lib Status: Unknown => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubunt

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-01-23 Thread Kees Cook
** Changed in: xmms-speex (Ubuntu Gutsy) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Dapper) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Gutsy) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Hardy) Status: New => Confirmed **

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-01-23 Thread Kees Cook
** Changed in: libannodex (Ubuntu) Status: New => Confirmed ** Changed in: libfishsound (Ubuntu) Status: New => Confirmed ** Changed in: libsdl-sound1.2 (Ubuntu) Status: New => Confirmed ** Changed in: sweep (Ubuntu) Status: New => Confirmed -- CVE-2008-1686: Multip

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-01-23 Thread Kees Cook
** Changed in: xmms-speex (Ubuntu Gutsy) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Dapper) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Gutsy) Status: New => Confirmed ** Changed in: libannodex (Ubuntu Hardy) Status: New => Confirmed **

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-01-23 Thread Kees Cook
** Changed in: libannodex (Ubuntu) Status: New => Confirmed ** Changed in: libfishsound (Ubuntu) Status: New => Confirmed ** Changed in: libsdl-sound1.2 (Ubuntu) Status: New => Confirmed ** Changed in: sweep (Ubuntu) Status: New => Confirmed -- CVE-2008-1686: Multip

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-05-07 Thread Sergio Zanchetta
The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life - http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the Gutsy task. ** Changed in: libannodex (Ubuntu Gutsy) Status: Confirmed => Won't Fix ** Changed in: libfishsound (Ubuntu Gutsy)

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-27 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/dapper/vorbis-tools/dapper- security ** Branch linked: lp:~ubuntu-branches/ubuntu/feisty/vorbis-tools/feisty- security ** Branch linked: lp:~ubuntu-branches/ubuntu/gutsy/vorbis-tools/gutsy- security ** Branch linked: lp:~ubuntu-branches/ubuntu/hardy/v

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-27 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/dapper/speex/dapper- security ** Branch linked: lp:ubuntu/feisty-updates/speex ** Branch linked: lp:~ubuntu-branches/ubuntu/hardy/speex/hardy-security ** Branch linked: lp:~ubuntu-branches/ubuntu/gutsy/speex/gutsy-security -- CVE-2008-1686: Multiple

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-28 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic/xine-lib -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-27 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/dapper/vorbis-tools/dapper- security ** Branch linked: lp:~ubuntu-branches/ubuntu/feisty/vorbis-tools/feisty- security ** Branch linked: lp:~ubuntu-branches/ubuntu/gutsy/vorbis-tools/gutsy- security ** Branch linked: lp:~ubuntu-branches/ubuntu/hardy/v

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-27 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/dapper/speex/dapper- security ** Branch linked: lp:ubuntu/feisty-updates/speex ** Branch linked: lp:~ubuntu-branches/ubuntu/hardy/speex/hardy-security ** Branch linked: lp:~ubuntu-branches/ubuntu/gutsy/speex/gutsy-security -- CVE-2008-1686: Multiple

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-06-28 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/karmic/xine-lib -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2009-05-07 Thread Sergio Zanchetta
The 18 month support period for Gutsy Gibbon 7.10 has reached its end of life - http://www.ubuntu.com/news/ubuntu-7.10-eol . As a result, we are closing the Gutsy task. ** Changed in: libannodex (Ubuntu Gutsy) Status: Confirmed => Won't Fix ** Changed in: libfishsound (Ubuntu Gutsy)

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-08 Thread Reinhard Tartler
new upstream (1.1.14) fixing this issue is prepared. ** Changed in: xine-lib (Ubuntu) Assignee: (unassigned) => Reinhard Tartler (siretart) Status: New => Fix Committed -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/21865

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-12 Thread Launchpad Bug Tracker
This bug was fixed in the package xine-lib - 1.1.14-1ubuntu1 --- xine-lib (1.1.14-1ubuntu1) intrepid; urgency=low * merge from debian unstable. Remaining changes: - disable the jack plugin in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Mainta

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-07-12 Thread William Grant
** Changed in: vlc (Ubuntu) Assignee: (unassigned) => William Grant (wgrant) Status: New => Fix Released ** Changed in: vlc (Ubuntu Hardy) Assignee: (unassigned) => William Grant (wgrant) Status: New => In Progress -- CVE-2008-1686: Multiple speex implementations insuffic

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-19 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-23 Thread William Grant
VLC patch at http://trac.videolan.org/vlc/changeset/c1c81073e661f7d80197711ab11753e1e170b44c. -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is s

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-09 Thread William Grant
** Changed in: vlc (Ubuntu Hardy) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubun

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
** Changed in: xine-lib (Ubuntu Dapper) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Feisty) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Gutsy) Status: In Progress => Fix Released ** Changed in: xine-lib (Ubuntu Hardy) St

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
Debian fixed this in 1.2.0-2, and Intrepid now has 1.2.0-5 ** Changed in: vorbis-tools (Ubuntu) Status: Confirmed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-08-06 Thread Jamie Strandboge
My last comment was for vorbis-tools. -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubunt

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-02 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-611-1 ** Changed in: speex (Ubuntu Dapper) Status: Fix Committed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member o

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-06-02 Thread Jamie Strandboge
http://www.ubuntu.com/usn/usn-611-2 ** Changed in: vorbis-tools (Ubuntu Dapper) Status: Fix Committed => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a m

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Adam Buchbinder
** Bug watch added: Gentoo Bugzilla #217715 http://bugs.gentoo.org/show_bug.cgi?id=217715 ** Also affects: speex (Gentoo Linux) via http://bugs.gentoo.org/show_bug.cgi?id=217715 Importance: Unknown Status: Unknown ** Bug watch added: Red Hat Bugzilla #441239 https://bugzilla.re

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Bug Watch Updater
** Changed in: speex (Gentoo Linux) Status: Unknown => Fix Released ** Changed in: speex (Fedora) Status: Unknown => In Progress ** Changed in: vorbis-tools Status: Unknown => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https:/

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Adam Buchbinder
** Bug watch added: Xine Bugzilla #83 http://bugs.xine-project.org/show_bug.cgi?id=83 ** Also affects: xine-lib via http://bugs.xine-project.org/show_bug.cgi?id=83 Importance: Unknown Status: Unknown -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks ht

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-12 Thread Bug Watch Updater
** Changed in: xine-lib Status: Unknown => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubunt

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-18 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: In Progress => Fix Released -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-19 Thread Bug Watch Updater
** Changed in: speex (Fedora) Status: Fix Released => In Progress -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 218652] Re: CVE-2008-1686: Multiple speex implementations insufficient boundary checks

2008-05-07 Thread Jamie Strandboge
** Changed in: gst-plugins-good0.10 (Ubuntu Dapper) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Changed in: gst-plugins-good0.10 (Ubuntu Feisty) Assignee: (unassigned) => Jamie Strandboge (jdstrand) Status: New => In Progress ** Chan

  1   2   3   >