Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 12: FEDORA-2010-1234 Urgent: libjpeg Security Flaw

fedora
Calendar Grey August 10, 2009
Dist Fedora Esm H88
Fedora 10's libpng upgrade addresses CVE-2009-2042, improving defenses against buffer overflow vulnerabilities.
Fixes CVE-2009-2663

Summary

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free,

general-purpose compressed audio format for audio and music at fixed

and variable bitrates from 16 to 128 kbps/channel.

The libvorbis package contains runtime libraries for use in programs

that support Ogg Vorbis.

Update Information:

Fixes CVE-2009-2663

Topics%20covered

Topics Covered

security advisory critical Fedora DoS libvorbis

Change Log

* Sun Aug 9 2009 Jindrich Novy 1.2.0-6 - fix CVE-2009-2663 (#516259)

References


[ 1 ] Bug #516259 - CVE-2009-2663 libvorbis: Improper codec headers processing (DoS, ACE) https://bugzilla.redhat.com/show_bug.cgi?id=516259

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libvorbis' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
important
Lowest
Low
Medium
High
Critical

Name: libvorbis
Product: Fedora 10
Version: 1.2.0
Release: 6.fc10
URL: https://www.xiph.org/
Summary: The Vorbis General Audio Compression Codec.

Topics%20covered

Topics Covered

security advisory critical Fedora DoS libvorbis

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here