Path to this page:
Subject: CVS commit: [pkgsrc-2008Q4] pkgsrc/audio/libaudiofile
From: Matthias Scheler
Date: 2009-01-22 21:21:28
Message id: 20090122202128.87100175D0@cvs.netbsd.org
Log Message:
Pullup ticket #2652 - requested by drochner
libaudiofile: security patch
Revisions pulled up:
audio/libaudiofile/Makefile 1.43
audio/libaudiofile/distinfo 1.12
audio/libaudiofile/patches/patch-ac 1.1
audio/libaudiofile/patches/patch-ad 1.1
---
Module Name: pkgsrc
Committed By: drochner
Date: Wed Jan 21 15:19:27 UTC 2009
Modified Files:
pkgsrc/audio/libaudiofile: Makefile distinfo
Added Files:
pkgsrc/audio/libaudiofile/patches: patch-ac patch-ad
Log Message:
(attempt to) fix CVE-2008-5824 (buffer overflow in msadpcm.c),
see Debian bug #510205, just done correctly.
The IMA code might have similar problems. The code appearently can't
handle stereo files correctly anyway, so bail out if >1 channel
which should avoid the problem.
bump PKGREVISION
Files: