UbuntuUpdates.org

Package "jackd2"




Name: jackd2

Description:

JACK Audio Connection Kit (server and example clients)

Latest version: *DELETED*
Release: focal (20.04)
Level: proposed
Repository: universe
Homepage: http://jackaudio.org/

Links


Download "jackd2"


Other versions of "jackd2" in Focal

Repository Area Version
base main 1.9.12~dfsg-2ubuntu2
base universe 1.9.12~dfsg-2ubuntu2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: *DELETED* 2020-04-16 20:07:26 UTC
No changelog for deleted or moved packages.

Version: 1.9.12~dfsg-2ubuntu2 2020-04-16 12:06:36 UTC

  jackd2 (1.9.12~dfsg-2ubuntu2) focal; urgency=medium

  * debian/patches/CVE-2019-13351.patch:
    - Set fSocket to -1 after close on an error to prevent a double close,
      fix CVE-2019-13351 (lp: #1833479)

 -- Sebastien Bacher <email address hidden> Thu, 16 Apr 2020 10:21:43 +0200

1833479 libjack-jackd2-0 double close on a failure to connect to jackd which causes crashes in multithreaded programs
CVE-2019-13351 posix/JackSocket.cpp in libjack in JACK2 1.9.1 through 1.9.12 (as distributed with alsa-plugins 1.1.7 and later) has a "double file descriptor close"



About   -   Send Feedback to @ubuntu_updates