USN-1370-1: libvorbis vulnerability

Releases

• Ubuntu 11.10
• Ubuntu 11.04
• Ubuntu 10.10
• Ubuntu 10.04

Packages

• libvorbis - The Vorbis General Audio Compression Codec

Details

It was discovered that libvorbis did not correctly handle certain malformed
ogg files. If a user were tricked into opening a specially crafted ogg file
with an application that uses libvorbis, an attacker could cause a denial
of service or possibly execute arbitrary code with the user's privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.10

• libvorbis0a - 1.3.2-1ubuntu2.1

Ubuntu 11.04

• libvorbis0a - 1.3.2-1ubuntu1.1

Ubuntu 10.10

• libvorbis0a - 1.3.1-1ubuntu0.1

Ubuntu 10.04

• libvorbis0a - 1.2.3-3ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

• CVE-2012-0444

Related notices

• USN-1369-1: thunderbird
• USN-1355-1: firefox
• USN-1353-1: xulrunner-1.9.2
• USN-1350-1: thunderbird