Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora 36: FEDORA-2023-7c94210f1a High: Opusfile Memory Leak Fix

fedora
Calendar Grey February 10, 2023
Dist Fedora Esm H88
To fix the NULL pointer dereference issue in opusfile on Fedora 36, perform a thorough code review, adding checks to validate pointers before dereferencing.
Add upstream fix for CVE-2022-47021

Summary

libopusfile provides a high-level API for decoding and seeking

within .opus files. It includes:

* Support for all files with at least one Opus stream (including

multichannel files or Ogg files where Opus is muxed with something else).

* Full support, including seeking, for chained files.

* A simple stereo downmixing API (allowing chained files to be

decoded with a single output format, even if the channel count changes).

* Support for reading from a file, memory buffer, or over HTTP(S)

(including seeking).

* Support for both random access and streaming data sources.

Add upstream fix for CVE-2022-47021

* Wed Feb 1 2023 Peter Robinson - 0.12-9

- Add upstream fix for CVE-2022-47021

* Thu Jan 19 2023 Fedora Release Engineering - 0.12-8

- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

* Fri Jul 22 2022 Fedora Release Engineering - 0.12-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

[ 1 ] Bug #2163902 - CVE-2022-47021 opusfile: NULL pointer dereference in op_get_data() and op_open1() in opusfile.c [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=2163902

su -c 'dnf upgrade --advisory FEDORA-2023-6b83109e4e' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Product: Fedora 36
Version: 0.12
Release: 9.fc36
Summary: A high-level API for decoding and seeking within .opus files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here