-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-9cdfc21898 2023-02-02 02:14:38.257889 -------------------------------------------------------------------------------- Name : mingw-opusfile Product : Fedora 37 Version : 0.12 Release : 9.fc37 URL : https://www.opus-codec.org/ Summary : A high-level API for decoding and seeking within .opus files Description : libopusfile provides a high-level API for decoding and seeking within .opus files. It includes: * Support for all files with at least one Opus stream (including multichannel files or Ogg files where Opus is muxed with something else). * Full support, including seeking, for chained files. * A simple stereo downmixing API (allowing chained files to be decoded with a single output format, even if the channel count changes). * Support for reading from a file, memory buffer, or over HTTP(S) (including seeking). * Support for both random access and streaming data sources. -------------------------------------------------------------------------------- Update Information: Fix CVE-2022-47021 -------------------------------------------------------------------------------- ChangeLog: * Tue Jan 24 2023 David King- 0.12-9 - Fix CVE-2022-47021 (#2163898) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2163898 - CVE-2022-47021 opusfile: NULL pointer dereference in op_get_data() and op_open1() in opusfile.c https://bugzilla.redhat.com/show_bug.cgi?id=2163898 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-9cdfc21898' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue