[Secure-testing-team] Bug#775913: vala-0.26: CVE-2014-8154: Heap-buffer overflow in vala-gstreamer bindings at Gst.MapInfo()

[Salvatore Bonaccorso]

Source: vala-0.26
Version: 0.26.1-1
Severity: grave
Tags: security upstream patch fixed-upstream
Control: fixed -1 0.26.2-1

Hi,

the following vulnerability was published for vala-0.26.

CVE-2014-8154[0]:
Heap-buffer overflow in vala-gstreamer bindings at Gst.MapInfo()

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-8154
[1] https://git.gnome.org/browse/vala/commit/?id=3092537db65887e24a3d3e87a27caf9c5295e4f7 
[2] https://bugzilla.gnome.org/show_bug.cgi?id=678663
[3] https://bugzilla.novell.com/show_bug.cgi?id=913071
[4] https://bugzilla.redhat.com/show_bug.cgi?id=1181404

Regards,
Salvatore