Three vulnerabilities have been discovered in the mt-daapd DAAP audio
server (also known as the Firefly Media Server). The Common
Vulnerabilities and Exposures project identifies the following three
problems:
Read the full story: DSA-1597 mt-daapd - multiple vulnerabilities: http://www.debian.org/security/2008/dsa-1597
Several local (remote) vulnerabilities have been discovered in libvorbis,
a library for the Vorbis general-purpose compressed audio codec. The Common
Vulnerabilities and Exposures project identifies the following problems:
Read the full story: DSA-1591 libvorbis - several vulnerabilities: http://www.debian.org/security/2008/dsa-1591
It was discovered that libfishsound, a simple programming interface that
wraps Xiph.Org audio codecs, didn’t correctly handle negative values in
a particular header field. This could allow malicious files to execute
arbitary code.
Read the full story: DSA-1584 libfishsound - buffer overflow: http://www.debian.org/security/2008/dsa-1584