Fedora 7 libvorbis: Important Security Update Addressing Vulnerabilities

Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free,

general-purpose compressed audio format for audio and music at fixed

and variable bitrates from 16 to 128 kbps/channel.

The libvorbis package contains runtime libraries for use in programs

that support Ogg Voribs.

Multiple security flaws were found in libvorbis. This updated package fixes them all.

* Thu Aug 9 2007 Behdad Esfahbod - 1:1.1.2-3

- Add 16 patches to fix various CVEs.

- Resolves: #250599

[ 1 ] Bug #250599

https://bugzilla.redhat.com/show_bug.cgi?id=250599

[ 2 ] Bug #250612

https://bugzilla.redhat.com/show_bug.cgi?id=250612

[ 3 ] CVE-2007-3106

[ 4 ] CVE-2007-4065

[ 5 ] CVE-2007-4066

[ 6 ] CVE-2007-4029

8204a40f1b7ccbd7cf5bcb0dc51b2d905e3d0610 libvorbis-debuginfo-1.1.2-3.fc7.ppc64.rpm

58c4358e726fc83558fd6f9cc9e767b589acfc61 libvorbis-1.1.2-3.fc7.ppc64.rpm

de4364e38b5c9ccc0a6966895a146b76b829d240 libvorbis-devel-1.1.2-3.fc7.ppc64.rpm

6c2963632ead7cd39b5f203a0614e3ab3f13a537 libvorbis-debuginfo-1.1.2-3.fc7.i386.rpm

8a6639feaee1dcdbd9c747095decf032a3b6b3f8 libvorbis-devel-1.1.2-3.fc7.i386.rpm

1b58a7ff5ec4c317516d1e11c544e21ed3eaca84 libvorbis-1.1.2-3.fc7.i386.rpm

324005f6d60e1daef00c70d7924ca96d4f7ef4db libvorbis-debuginfo-1.1.2-3.fc7.x86_64.rpm

48b267dce16ab379a37cb3ff71c7c3209963ddf9 libvorbis-1.1.2-3.fc7.x86_64.rpm

098cc588ea7654e321a5ee3d15f109d35e030615 libvorbis-devel-1.1.2-3.fc7.x86_64.rpm

b94e67b5fbf987ccc76cb44e4b5706c9511175c0 libvorbis-devel-1.1.2-3.fc7.ppc.rpm

aa5a4f6b69440d29a26c6b01943d508a34738d97 libvorbis-debuginfo-1.1.2-3.fc7.ppc.rpm

cba5e2b4b7cbb39166c81172bfd006080e6b57b2 libvorbis-1.1.2-3.fc7.ppc.rpm

eafe9fd285a75964eb1ba44558c9ec7828f77f15 libvorbis-1.1.2-3.fc7.src.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/