Ubuntu Security Notice 912-1 - It was discovered that Audio File Library contained a heap-based buffer overflow. If a user or automated system processed a crafted WAV file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. The default compiler options for Ubuntu should reduce this vulnerability to a denial of service.
0b502f97154d452f8f94769ee6f50b5b80ad64e219e3e560f7486c91be5717dd
Debian Linux Security Advisory 1972-2 - This advisory adds the packages for the old stable distribution (etch), with the exception of the mips packages. The updates for the mips architecture will be released when they become available.
b41aef6a84f8f686ad2670000dc6210ced1838aee6eeb3f26cd8aa9ccc86c4fb
Debian Linux Security Advisory 1972-1 - Max Kellermann discovered a heap-based buffer overflow in the handling of ADPCM WAV files in libaudiofile. This flaw could result in a denial of service (application crash) or possibly execution of arbitrary code via a crafted WAV file.
35221bed4b7fd1c4950acc5b98ba657dbf51b4f5b056ebcbd5ac1d6e6b58a6d9