group.of.nepali.translators team mailing list archive

[Rodrigo Figueiredo Zaiden <948459@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package libvorbis - 1.3.5-3ubuntu0.2+esm1

---------------
libvorbis (1.3.5-3ubuntu0.2+esm1) xenial-security; urgency=medium

  * SECURITY UPDATE: Out-of-bounds access
    - debian/patches/CVE-2017-14160_CVE-2018-10393-1.patch: add boundaries
      check in bark_noise_hybridmp() in lib/psy.c.
    - debian/patches/CVE-2017-14160_CVE-2018-10393-2.patch: add further
      boundaries checks in bark_noise_hybridmp() in lib/psy.c.
    - debian/patches/CVE-2018-10392.patch: add a validation for channels
      boundaries in vorbis_encode_setup_init() in lib/vorbisenc.c.
    - CVE-2017-14160, CVE-2018-10392, CVE-2018-10393
  * Fix autopkgtest:
    - debian/patches/0003-vorbisenc-detect-if-new-template-is-null.patch:
      check if new_template is NULL at vorbis_encode_ctl() in
      lib/vorbisenc.c.

 -- Rodrigo Figueiredo Zaiden <rodrigo.zaiden@xxxxxxxxxxxxx>  Wed, 11
May 2022 14:54:32 -0300

** Also affects: libvorbis (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: libvorbis (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** Also affects: vorbis-tools (Ubuntu Xenial)
   Importance: Undecided
       Status: New

** No longer affects: vorbis-tools (Ubuntu Xenial)

** Changed in: libvorbis (Ubuntu Xenial)
       Status: New => Fix Released

** Changed in: libvorbis (Ubuntu)
       Status: New => Confirmed

** Bug watch added: gitlab.xiph.org/xiph/vorbis/-/issues #1975
   https://gitlab.xiph.org/xiph/vorbis/-/issues/1975

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/948459

Title:
  oggenc fails when using '--advanced-encode-option disable_coupling'
  switch and CBR encoding

Status in libvorbis package in Ubuntu:
  Confirmed
Status in vorbis-tools package in Ubuntu:
  New
Status in libvorbis source package in Xenial:
  Fix Released

Bug description:
  Running the following command line in a shell (with in.wav being a
  commong 16bit 44,1KHz wave file):

  oggenc -b 80 -m 80 -M 80 --advanced-encode-option disable_coupling -o
  out.ogg in.wav

  I get the following output:

  Mise en route du mécanisme de gestion du débit
  Ouverture avec le module wav : WAV file reader
  Encodage de "stereo.wav" 
           en "out.ogg" 
  en utilisant la gestion du débit (min 80 kbps, max 80 kbps)
  Setting advanced encoder option "disable_coupling"
  Erreur de segmentation

  Without the '--advanced-encode-option disable_coupling' switch,
  encoding works as usual.

  More about my setup:
  Ubuntu 10.10 amd64 (all packages up to date)
  vorbis-tools 1.4.0

  
  More information available on demand, this is the first time I file a bug here.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvorbis/+bug/948459/+subscriptions