Package: mpg123 / 1.31.2-1+deb12u1

Metadata

Package Version Patches format
mpg123 1.31.2-1+deb12u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0001 disable_not_public_funcs.patch | (download)

src/libmpg123/dither.h | 2 2 + 0 - 0 !
src/libmpg123/dither_impl.h | 2 2 + 0 - 0 !
2 files changed, 4 insertions(+)

 disable function mpg123_noise that is not yet part of
 libmpg123's official API and should therefore not get exported.
CVE 2024 10573.patch | (download)

src/libmpg123/frame.c | 15 6 + 9 - 0 !
src/libmpg123/frame.h | 46 28 + 18 - 0 !
src/libmpg123/layer1.c | 2 1 + 1 - 0 !
src/libmpg123/layer2.c | 6 3 + 3 - 0 !
src/libmpg123/layer3.c | 42 21 + 21 - 0 !
src/libmpg123/libmpg123.c | 22 11 + 11 - 0 !
src/libmpg123/parse.c | 239 140 + 99 - 0 !
7 files changed, 210 insertions(+), 162 deletions(-)

 fix buffer overflow (frankenstein's monster) (cve-2024-10573)