[ubuntu/resolute-proposed] alsa-lib 1.2.15.3-1ubuntu1 (Accepted)

Marc Deslauriers marc.deslauriers at ubuntu.com
Fri Jan 30 13:55:17 UTC 2026


alsa-lib (1.2.15.3-1ubuntu1) resolute; urgency=medium

  * SECURITY UPDATE: heap overflow in topology mixer control decoder
    - debian/patches/CVE-2026-25068.patch: add boundary check for channel
      mixer count in src/topology/ctl.c.
    - CVE-2026-25068

Date: Fri, 30 Jan 2026 08:07:46 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/alsa-lib/1.2.15.3-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 30 Jan 2026 08:07:46 -0500
Source: alsa-lib
Built-For-Profiles: noudeb
Architecture: source
Version: 1.2.15.3-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 alsa-lib (1.2.15.3-1ubuntu1) resolute; urgency=medium
 .
   * SECURITY UPDATE: heap overflow in topology mixer control decoder
     - debian/patches/CVE-2026-25068.patch: add boundary check for channel
       mixer count in src/topology/ctl.c.
     - CVE-2026-25068
Checksums-Sha1:
 4b3fe5193618a947c11a0458dacf00a5b33ff1ab 3046 alsa-lib_1.2.15.3-1ubuntu1.dsc
 3f8436efecf15e186b8df21c45774a06b0bcc092 34592 alsa-lib_1.2.15.3-1ubuntu1.debian.tar.xz
 fe6db1a3e642ef0c7dec2c3f13a30f38a36b441d 6911 alsa-lib_1.2.15.3-1ubuntu1_source.buildinfo
Checksums-Sha256:
 2ee98585908e0daa71d259de3348457d33aa4566a4a423f3a0fa52b4967b8a14 3046 alsa-lib_1.2.15.3-1ubuntu1.dsc
 7a2d6da992563474bdb212ba3eebc50b989740b1657a265fe103820c804e92e8 34592 alsa-lib_1.2.15.3-1ubuntu1.debian.tar.xz
 6fba29806240a901130a8eac269f560367823a92f30ad496bda50868fc042465 6911 alsa-lib_1.2.15.3-1ubuntu1_source.buildinfo
Files:
 9a2e2f3c02787bd7dacec0c25a93dfe1 3046 libs optional alsa-lib_1.2.15.3-1ubuntu1.dsc
 a0882825a537d895f8e363fd60cffa4b 34592 libs optional alsa-lib_1.2.15.3-1ubuntu1.debian.tar.xz
 7e5b67df2b5aa129e5cecb511b789e27 6911 libs optional alsa-lib_1.2.15.3-1ubuntu1_source.buildinfo
Original-Maintainer: Debian ALSA Maintainers <pkg-alsa-devel at lists.alioth.debian.org>


More information about the Resolute-changes mailing list