Package: taglib / 1.11.1+dfsg.1-3

Metadata

Package Version Patches format
taglib 1.11.1+dfsg.1-3 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
taglib config multiarch.patch | (download)

taglib-config.cmake | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 make taglib-config architecture-independent
 This allows multi-arching libtag1-dev.
icu.patch | (download)

ConfigureChecks.cmake | 5 5 + 0 - 0 !
taglib/CMakeLists.txt | 16 9 + 7 - 0 !
taglib/toolkit/tstring.cpp | 56 33 + 23 - 0 !
3 files changed, 47 insertions(+), 30 deletions(-)

 use libicu instead of non-free unicode files
 This patch allows getting rid of non-free, vendored files unicode.h and
 unicode.cpp. It adds a new dependency on libicu instead.
CVE 2017 12678.diff | (download)

taglib/mpeg/id3v2/id3v2framefactory.cpp | 5 3 + 2 - 0 !
1 file changed, 3 insertions(+), 2 deletions(-)

---
CVE 2018 11439.patch | (download)

taglib/ogg/flac/oggflacfile.cpp | 14 12 + 2 - 0 !
1 file changed, 12 insertions(+), 2 deletions(-)

 [patch] fixed oob read when loading invalid ogg flac file. (#868)
 (#869)

CVE-2018-11439 is caused by a failure to check the minimum length
of a ogg flac header. This header is detailed in full at:
https://xiph.org/flac/ogg_mapping.html. Added more strict checking
for entire header.

0005 Fix possible Ogg packet losses.patch | (download)

taglib/ogg/oggfile.cpp | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix possible ogg packet losses.

Bug-Debian: https://bugs.debian.org/915281