Bug#876778: libvorbis: CVE-2017-14633

2017-11-20 Thread Guido Günther
control: tags -1 +patch Hi, On Mon, Sep 25, 2017 at 09:46:53PM +0200, Salvatore Bonaccorso wrote: > Source: libvorbis > Version: 1.3.5-4 > Severity: important > Tags: security upstream > Forwarded: https://gitlab.xiph.org/xiph/vorbis/issues/2329 > > Hi, > > the following vulnerability was publis

Bug#876778: libvorbis: CVE-2017-14633

2017-09-25 Thread Salvatore Bonaccorso
Source: libvorbis Version: 1.3.5-4 Severity: important Tags: security upstream Forwarded: https://gitlab.xiph.org/xiph/vorbis/issues/2329 Hi, the following vulnerability was published for libvorbis. CVE-2017-14633[0]: | In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability | exi