Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 23: vorbis-tools Security Update - Critical Buffer Overflow Fix

fedora
Calendar Grey September 4, 2015
Dist Fedora Esm H88
Ubuntu 20.04 libxml2 security update addresses integer overflow in HTML parsing linked to CVE-2019-5808 vulnerability.
- oggenc: fix large alloca on bad AIFF input (CVE-2015-6749)

Summary

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free,

general-purpose compressed audio format for audio and music at fixed

and variable bitrates from 16 to 128 kbps/channel.

The vorbis package contains an encoder, a decoder, a playback tool, and a

comment editor.

Update Information:

- oggenc: fix large alloca on bad AIFF input (CVE-2015-6749)

Topics%20covered

Topics Covered

security advisory security update buffer overflow Fedora vorbis-tools

Change Log

References


[ 1 ] Bug #1258424 - vorbis-tools: Bufer overflow in aiff_open function https://bugzilla.redhat.com/show_bug.cgi?id=1258424 [ 2 ] Bug #1258443 - CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=1258443

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update vorbis-tools' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: vorbis-tools
Product: Fedora 23
Version: 1.4.0
Release: 22.fc23
URL: https://www.xiph.org/
Summary: The Vorbis General Audio Compression Codec tools

Topics%20covered

Topics Covered

security advisory security update buffer overflow Fedora vorbis-tools

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here