mpg123 (1.16.0-1ubuntu1.1) trusty-security; urgency=medium
* SECURITY UPDATE: Buffer overflow
- debian/patches/CVE-2014-9497.patch: Regression fix: Ensure decoder
reinitialization on combination of seek and resync (buffer
overflow) and add check for bad bit allocation value in layer I
decoder.
- CVE-2014-9497
* SECURITY UPDATE: Memory overread
- debian/patches/CVE-2016-1000247.patch: fix DoS with crafted ID3v2
tags.
- CVE-2016-1000247
* SECURITY UPDATE: Memory overread
- debian/patches/CVE-2017-10683.patch: fix in id3.c
- CVE-2017-10683
Date: 2018-09-05 18:37:13.502478+00:00
Changed-By: Eduardo dos Santos Barretto <eduardo.barre...@canonical.com>
Signed-By: Ubuntu Archive Robot
<cjwatson+ubuntu-archive-ro...@chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/mpg123/1.16.0-1ubuntu1.1
Sorry, changesfile not available.
--
Trusty-changes mailing list
Trusty-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/trusty-changes
