Source: libmad Version: 0.15.1b-7 Severity: important Tags: security upstream
Hi, the following vulnerability was published for libmad. CVE-2017-11552[0]: | The mad_decoder_run function in decoder.c in libmad 0.15.1b allows | remote attackers to cause a denial of service (memory corruption) via a | crafted MP3 file. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2017-11552 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11552 [1] http://seclists.org/fulldisclosure/2017/Jul/94 Regards, Salvatore