Publishing details

Published on 2024-07-01
Copied from ubuntu focal in PPA for Ubuntu Security Proposed by Evan Caville

Changelog

libcdio (2.0.0-2ubuntu0.2) focal-security; urgency=medium

  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2024-36600-1.patch: Allocates space for
      growth and additional buffer in lib/iso9660/rock.c
    - debian/patches/CVE-2024-36600-2.patch: Limits the maximum read
      count to prevent an overflow in lib/driver/_cdio_stdio.c
    - debian/patches/CVE-2024-36600-3.patch: Adds input validation to
      unicode16_decode function in lib/udf/udf_fs.c
    - debian/patches/CVE-2024-36600-4.patch: Adds bounds checking for
      directory buffer size and total size calculation in
      lib/iso9660/iso9660_fs.c
    - debian/patches/CVE-2024-36600-5.patch: Fixes overflow in iso9660
      dir read (32-bit) in lib/iso9660/iso9660_fs.c
    - debian/patches/CVE-2024-36600-6.patch: Checks the validity of
      i_extended_attr member in udf_get_lba() in lib/udf/udf_fs.c
    - debian/patches/CVE-2024-36600-7.patch: Adds 32-bit size test
      only when needed in lib/iso9660/iso9660_fs.c
    - CVE-2024-36600

 -- Bruce Cable <email address hidden>  Mon, 24 Jun 2024 16:01:37 +1000

Available diffs

diff from 2.0.0-2 (in Debian) to 2.0.0-2ubuntu0.2 (3.3 KiB)
diff from 2.0.0-2ubuntu0.2~rc1 to 2.0.0-2ubuntu0.2 (297 bytes)

Builds

Built packages

libcdio-dev library to read and control CD-ROM (development files)

libcdio-utils sample applications based on the CDIO libraries

libcdio-utils-dbgsym debug symbols for libcdio-utils

libcdio18 library to read and control CD-ROM

libcdio18-dbgsym debug symbols for libcdio18

libiso9660-11 library to work with ISO9660 filesystems

libiso9660-11-dbgsym debug symbols for libiso9660-11

libiso9660-dev library to work with ISO9660 filesystems (development files)

libudf-dev library to work with UDF filesystems (development files)

libudf0 library to work with UDF filesystems

libudf0-dbgsym debug symbols for libudf0

Package files

libcdio-dev_2.0.0-2ubuntu0.2_amd64.deb (163.3 KiB)
libcdio-dev_2.0.0-2ubuntu0.2_arm64.deb (162.5 KiB)
libcdio-dev_2.0.0-2ubuntu0.2_armhf.deb (157.1 KiB)
libcdio-dev_2.0.0-2ubuntu0.2_i386.deb (170.6 KiB)
libcdio-dev_2.0.0-2ubuntu0.2_ppc64el.deb (178.4 KiB)
libcdio-dev_2.0.0-2ubuntu0.2_riscv64.deb (223.3 KiB)
libcdio-dev_2.0.0-2ubuntu0.2_s390x.deb (160.9 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_amd64.ddeb (209.4 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_arm64.ddeb (212.6 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_armhf.ddeb (207.1 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_i386.ddeb (194.6 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_ppc64el.ddeb (223.5 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_riscv64.ddeb (211.5 KiB)
libcdio-utils-dbgsym_2.0.0-2ubuntu0.2_s390x.ddeb (203.2 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_amd64.deb (55.5 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_arm64.deb (53.1 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_armhf.deb (51.2 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_i386.deb (55.5 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_ppc64el.deb (56.7 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_riscv64.deb (52.8 KiB)
libcdio-utils_2.0.0-2ubuntu0.2_s390x.deb (52.2 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_amd64.ddeb (228.3 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_arm64.ddeb (230.4 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_armhf.ddeb (230.2 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_i386.ddeb (206.7 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_ppc64el.ddeb (245.2 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_riscv64.ddeb (231.1 KiB)
libcdio18-dbgsym_2.0.0-2ubuntu0.2_s390x.ddeb (231.5 KiB)
libcdio18_2.0.0-2ubuntu0.2_amd64.deb (58.0 KiB)
libcdio18_2.0.0-2ubuntu0.2_arm64.deb (56.1 KiB)
libcdio18_2.0.0-2ubuntu0.2_armhf.deb (50.7 KiB)
libcdio18_2.0.0-2ubuntu0.2_i386.deb (63.3 KiB)
libcdio18_2.0.0-2ubuntu0.2_ppc64el.deb (67.8 KiB)
libcdio18_2.0.0-2ubuntu0.2_riscv64.deb (53.0 KiB)
libcdio18_2.0.0-2ubuntu0.2_s390x.deb (54.3 KiB)
libcdio_2.0.0-2ubuntu0.2.debian.tar.xz (12.9 KiB)
libcdio_2.0.0-2ubuntu0.2.dsc (2.0 KiB)
libcdio_2.0.0.orig.tar.gz (2.2 MiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_amd64.ddeb (69.8 KiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_arm64.ddeb (69.8 KiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_armhf.ddeb (68.0 KiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_i386.ddeb (62.6 KiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_ppc64el.ddeb (78.4 KiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_riscv64.ddeb (68.2 KiB)
libiso9660-11-dbgsym_2.0.0-2ubuntu0.2_s390x.ddeb (69.2 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_amd64.deb (21.9 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_arm64.deb (20.4 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_armhf.deb (18.0 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_i386.deb (23.5 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_ppc64el.deb (24.2 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_riscv64.deb (20.5 KiB)
libiso9660-11_2.0.0-2ubuntu0.2_s390x.deb (19.9 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_amd64.deb (35.7 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_arm64.deb (35.7 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_armhf.deb (32.9 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_i386.deb (38.1 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_ppc64el.deb (40.8 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_riscv64.deb (57.3 KiB)
libiso9660-dev_2.0.0-2ubuntu0.2_s390x.deb (34.2 KiB)
libudf-dev_2.0.0-2ubuntu0.2_amd64.deb (18.3 KiB)
libudf-dev_2.0.0-2ubuntu0.2_arm64.deb (18.4 KiB)
libudf-dev_2.0.0-2ubuntu0.2_armhf.deb (17.3 KiB)
libudf-dev_2.0.0-2ubuntu0.2_i386.deb (19.2 KiB)
libudf-dev_2.0.0-2ubuntu0.2_ppc64el.deb (20.4 KiB)
libudf-dev_2.0.0-2ubuntu0.2_riscv64.deb (24.3 KiB)
libudf-dev_2.0.0-2ubuntu0.2_s390x.deb (18.3 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_amd64.ddeb (43.3 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_arm64.ddeb (43.9 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_armhf.ddeb (43.4 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_i386.ddeb (42.0 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_ppc64el.ddeb (45.1 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_riscv64.ddeb (43.7 KiB)
libudf0-dbgsym_2.0.0-2ubuntu0.2_s390x.ddeb (44.0 KiB)
libudf0_2.0.0-2ubuntu0.2_amd64.deb (9.8 KiB)
libudf0_2.0.0-2ubuntu0.2_arm64.deb (9.6 KiB)
libudf0_2.0.0-2ubuntu0.2_armhf.deb (8.5 KiB)
libudf0_2.0.0-2ubuntu0.2_i386.deb (10.4 KiB)
libudf0_2.0.0-2ubuntu0.2_ppc64el.deb (10.8 KiB)
libudf0_2.0.0-2ubuntu0.2_riscv64.deb (9.1 KiB)
libudf0_2.0.0-2ubuntu0.2_s390x.deb (9.5 KiB)