UbuntuUpdates.org

Package "libjack-jackd2-0"

Name: libjack-jackd2-0

Description:

JACK Audio Connection Kit (libraries)
Latest version: 1.9.12~dfsg-2ubuntu2
Release: focal (20.04)
Level: base
Repository: main
Head package: jackd2
Homepage: http://jackaudio.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libjack-jackd2-0"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libjack-jackd2-0" in Focal

No other version of this package is available in the Focal release.

Changelog

Version: 1.9.12~dfsg-2ubuntu2 2020-04-16 20:07:20 UTC

  jackd2 (1.9.12~dfsg-2ubuntu2) focal; urgency=medium

  * debian/patches/CVE-2019-13351.patch:
    - Set fSocket to -1 after close on an error to prevent a double close,
      fix CVE-2019-13351 (lp: #1833479)

 -- Sebastien Bacher <email address hidden> Thu, 16 Apr 2020 10:21:43 +0200
1833479 libjack-jackd2-0 double close on a failure to connect to jackd which causes crashes in multithreaded programs
CVE-2019-13351 posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close"


About   -   Send Feedback to @ubuntu_updates