Ubuntu
mpg123 package

mpg123 0.67-1ubuntu0.1 source package in Ubuntu

Changelog

mpg123 (0.67-1ubuntu0.1) hardy-security; urgency=low

  * SECURITY UPDATE: Integer signedness error in the store_id3_text function
    in the ID3v2 code in mpg123 before 1.7.2 allows remote attackers to cause
    a denial of service (out-of-bounds memory access) and possibly execute
    arbitrary code via an ID3 tag with a negative encoding value. (LP: 370031).
   - src/id3.c: Inline patch from upstream SVN rev 1920.
   - http://www.mpg123.org/cgi-bin/viewvc.cgi/tags/1.7.2/?view=log
   - CVE-2009-1301

 -- Stefan Lesicnik <email address hidden>   Fri, 01 May 2009 09:37:03 +0200

Upload details

Uploaded by:
Stefan Lesicnik
Sponsored by:
Jamie Strandboge
Uploaded to:
Hardy
Original maintainer:
MOTU
Architectures:
any
Section:
sound
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
mpg123_0.67.orig.tar.gz 636.8 KiB e665241ba315e9cff5141f933b306774b85c4128648b77360470a2bcc90606d9
mpg123_0.67-1ubuntu0.1.diff.gz 13.5 KiB e38389642d0a241d98aa3f9350243b669daef52a12e4925824f36440fbadae41
mpg123_0.67-1ubuntu0.1.dsc 838 bytes d7fd92a1c4bbb22ffe50c5be31226a540c1815a839a2401f20c416ba1f29e107

View changes file

Binary packages built by this source

mpg123: No summary available for mpg123 in ubuntu hardy.

No description available for mpg123 in ubuntu hardy.

mpg123-alsa: No summary available for mpg123-alsa in ubuntu hardy.

No description available for mpg123-alsa in ubuntu hardy.

mpg123-esd: No summary available for mpg123-esd in ubuntu hardy.

No description available for mpg123-esd in ubuntu hardy.

mpg123-nas: No summary available for mpg123-nas in ubuntu hardy.

No description available for mpg123-nas in ubuntu hardy.

mpg123-oss-3dnow: No summary available for mpg123-oss-3dnow in ubuntu hardy.

No description available for mpg123-oss-3dnow in ubuntu hardy.

mpg123-oss-i486: No summary available for mpg123-oss-i486 in ubuntu hardy.

No description available for mpg123-oss-i486 in ubuntu hardy.