-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 15 Jun 2017 08:11:03 +0800 Source: libsndfile Binary: libsndfile1-dev libsndfile1 sndfile-programs Architecture: source amd64 Version: 1.0.25-9.1+deb7u3 Distribution: wheezy-security Urgency: high Maintainer: Erik de Castro Lopo <erikd@mega-nerd.com> Changed-By: Chris Lamb <lamby@debian.org> Description: libsndfile1 - Library for reading/writing audio files libsndfile1-dev - Development files for libsndfile; a library for reading/writing a sndfile-programs - Sample programs that use libsndfile Closes: 864704 Changes: libsndfile (1.0.25-9.1+deb7u3) wheezy-security; urgency=high . * CVE-2017-6892: An error in the "aiff_read_chanmap()" function could be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file. (Closes: #864704) Checksums-Sha1: 4ae3588e4ed3073e48ee58699d6b0918e298030a 2010 libsndfile_1.0.25-9.1+deb7u3.dsc e95d9fca57f7ddace9f197071cbcfb92fa16748e 1060692 libsndfile_1.0.25.orig.tar.gz 8d00ff6272e8da2554c31aad916bdce83f53706b 19752 libsndfile_1.0.25-9.1+deb7u3.debian.tar.gz 0ffadafe3d2642593f27b95bc01ed90165dc20b5 391738 libsndfile1-dev_1.0.25-9.1+deb7u3_amd64.deb 8f776edf9b304216c61557e5655258ab7f9a2dcf 245544 libsndfile1_1.0.25-9.1+deb7u3_amd64.deb c06896e102bc2c7f9b1073787ec92c4ca078124c 119746 sndfile-programs_1.0.25-9.1+deb7u3_amd64.deb Checksums-Sha256: 5337266cc3023b026416200e80c3e1c00ec15018951b5614ad0d6d91dee9f425 2010 libsndfile_1.0.25-9.1+deb7u3.dsc 59016dbd326abe7e2366ded5c344c853829bebfd1702ef26a07ef662d6aa4882 1060692 libsndfile_1.0.25.orig.tar.gz eb44fe1042075acaa5b2baeda39cea8638121143b98475c75ecdb08c31cda192 19752 libsndfile_1.0.25-9.1+deb7u3.debian.tar.gz dc246681bdcc6236a688cde0dad0c0eb25eb6dd1fd335c57c2013e0156dc8b44 391738 libsndfile1-dev_1.0.25-9.1+deb7u3_amd64.deb ab5684302d82d837beb2cb2a425c767539e16d0d9529a530ab7e90a4bbb3b5f9 245544 libsndfile1_1.0.25-9.1+deb7u3_amd64.deb c89f93ccc457f1ab3c5327c1ea2b0e595f12c0cc9d7d316f25157ebb5b4830a2 119746 sndfile-programs_1.0.25-9.1+deb7u3_amd64.deb Files: bec3171aceb203e51dd59329ae450c17 2010 devel optional libsndfile_1.0.25-9.1+deb7u3.dsc e2b7bb637e01022c7d20f95f9c3990a2 1060692 devel optional libsndfile_1.0.25.orig.tar.gz 9f08887ef91337b94808d5ceaa3a0889 19752 devel optional libsndfile_1.0.25-9.1+deb7u3.debian.tar.gz 2314c5afb880e32314d6db031211aa44 391738 libdevel optional libsndfile1-dev_1.0.25-9.1+deb7u3_amd64.deb 181756c118905b223db8ca28067ccfa7 245544 libs optional libsndfile1_1.0.25-9.1+deb7u3_amd64.deb d4ede80747001f6924b78e75c538ba4c 119746 utils optional sndfile-programs_1.0.25-9.1+deb7u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAllB0YkACgkQHpU+J9Qx Hlh9XQ/8DclSyRDwyC4DgZ3J46VqEm3gtfYwhqWsXGWG4FBOhogelBn6DM6Xw1eK bZMxMmeJ/H8ni6wuUIbglJJHLatEAr+EpL/Xst8rg1TOwUrjLiqdtNg0zyC2PHN9 d6np4BmrgShGBzNprkhKaJRp0ig0mvn4pK+HktfVH18G1D3HOckqAonJVfwbTa06 dU2x1QZr0IyrdLHJSn6JBgUmuKMAKTyg0Jp5fsFT4YGr83Mgz0qSed38+R39gz+O +mvrC//qcJ5hfXCi2RO4NR0tQuqDI91D1+uc3HcvQHokbnwn2GSe4Ucu6XUQeaPO 98vP3vuZflc12Mdg8hVEm5bebULknGFrgWoN9GWMOLrFDbjG1bG30tqZXt7oaPKV 6qjQqxoHD07fFHEQ9fCf4N/o5Jer/6LlUoflMdqy/rnSzfMhX3QPiHMohFdvMC8R o2UNou8O7C07kPna/i+KTMhTKZqgAU10EXKGps1uSAML4Xd/fi5t3l5qwqv0UkPW lTNf72JXEQTTWprQ1dNnOM/h3pDCqe3hblGR+z0yBkgLiwJN/+95vDGvOwVcA4fV zfcX2jIKsAn0DeksNR0BG5jAKnusxWf6WX8aCWs+0VMEtEKMLCYAsNhctPthF/X0 uz9heFsoUtS4kQsfsCMIakQFtdr/RxzlBQ2Eo8RQ8KAnuJhoeEE= =/lOX -----END PGP SIGNATURE-----