Bugzilla Bug 217373

New in this release
-------------------

This is a bug fix release, containing the following changes:

        * Fixed bounds checking of mode in speex header. relates to:
          http://www.ocert.org/advisories/ocert-2008-2.html
        * Fixed bug preventing device dialog being reopened when
          closed via the window manager.


This is related to bug #216499

I have no idea if this is exploitable or anything, but the code change is
exactly the same as in libfishsound.

thanks for the bug/ebuild

arches, please test and mark stable

second try... this time even using the "Add Archs" button

so please test media-sound/sweep-0.9.3 and mark stable if possible

ppc stable

ppc64 stable

sparc/x86 stable

Hrm... Is my error below related to this bug? I've been getting this for a few
days, and I've cleared /usr/portage and http-replicator's cache, with the same
result. Thanks.

---
>>> Emerging (1 of 3) media-sound/sweep-0.9.3 to /
>>> Downloading 'http://gentoo.arcticnetwork.ca/source/distfiles/sweep-0.9.3.tar.gz'
--13:49:20-- 
http://gentoo.arcticnetwork.ca/source/distfiles/sweep-0.9.3.tar.gz
           => `/usr/portage/distfiles/sweep-0.9.3.tar.gz'
Connecting to 192.168.1.55:8081... connected.
Proxy request sent, awaiting response... 200 OK
Length: 1,248,948 (1.2M) [application/x-gzip]

100%[====================================>] 1,248,948    544.90K/s             

13:49:23 (543.37 KB/s) - `/usr/portage/distfiles/sweep-0.9.3.tar.gz' saved
[1248948/1248948]

 * checking ebuild checksums ;-) ...                                      [ ok
]
 * checking auxfile checksums ;-) ...                                     [ ok
]
 * checking miscfile checksums ;-) ...                                    [ ok
]
 * checking sweep-0.9.3.tar.gz ;-) ...                                    [ !!
]

!!! Digest verification failed:
!!! /usr/portage/distfiles/sweep-0.9.3.tar.gz
!!! Reason: Filesize does not match recorded size
!!! Got: 1248948
!!! Expected: 19869
fuji ~ # 

(In reply to comment #6)
> Hrm... Is my error below related to this bug? I've been getting this for a few
> days, and I've cleared /usr/portage and http-replicator's cache, with the same
> result. Thanks.

Yes, it is related. It seems the DIST entry got corrupted in one commit. I
resurrected it from before, please emerge --sync and retry.

amd64 stable, last arch.

reassigning to correct category

speex has been sent as GLSA 200804-17, this also fixes this bug.

Fixed in release snapshot.