Several security issues were fixed in libav, a multimedia library for processing audio and video files. . Package : libav Version : 6:11.12-1~deb8u9 CVE ID : CVE-2017-17127 CVE-2017-18245 CVE-2018-19128 CVE-2018-19130 CVE-2019-14443 CVE-2019-17542 Several security issues were fixed in libav, a multimedia library for processing audio and video files. CVE-2017-17127 The vc1_decode_frame function in libavcodec/vc1dec.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. CVE-2018-19130 is a duplicate of this vulnerability. CVE-2017-18245 The mpc8_probe function in libavformat/mpc8.c allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted audio file on 32-bit systems. CVE-2018-19128 Heap-based buffer over-read in decode_frame in libavcodec/lcldec.c allows an attacker to cause denial-of-service via a crafted avi file. CVE-2019-14443 Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv. CVE-2019-17542 Heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u9. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Tackling vulnerabilities in libav to avert system halts and buffer overruns. Update libraries for improved protection.. libav security, multimedia library, audio video processing. . LinuxSecurity.com Team
This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7577 (a buffer overread in MS_ADPCM_decode) (rhbz#1676510) - Fix CVE-2019-7575 (a buffer overwrite in MS_ADPCM_decode) (rhbz#1676744) - Fix CVE-2019-7574 (a buffer overread in IMA_ADPCM_decode) (rhbz#1676750) . MGASA-2019-0127 - Updated SDL12 packages fix security vulnerability Publication date: 05 Apr 2019 URL: https://advisories.mageia.org/MGASA-2019-0127.html Type: security Affected Mageia releases: 6 CVE: CVE-2019-7572, CVE-2019-7573, CVE-2019-7574, CVE-2019-7575, CVE-2019-7577, CVE-2019-7635, CVE-2019-7637, CVE-2019-7638 This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. - Fix CVE-2019-7577 (a buffer overread in MS_ADPCM_decode) (rhbz#1676510) - Fix CVE-2019-7575 (a buffer overwrite in MS_ADPCM_decode) (rhbz#1676744) - Fix CVE-2019-7574 (a buffer overread in IMA_ADPCM_decode) (rhbz#1676750) - Fix CVE-2019-7572 (a buffer overread in IMA_ADPCM_nibble) (rhbz#1676754) - Fix CVE-2019-7572 (a buffer overwrite in IMA_ADPCM_nibble) (rhbz#1676754) - Fix CVE-2019-7573, CVE-2019-7576 (buffer overreads in InitMS_ADPCM) (rhbz#1676752, rhbz#1676756) - Fix CVE-2019-7578 (a buffer overread in InitIMA_ADPCM) (rhbz#1676782) - Fix CVE-2019-7638, CVE-2019-7636 (buffer overflows when processing BMP images with too high number of colors) (rhbz#1677144, rhbz#1677157) - Fix CVE-2019-7637 (an integer overflow in SDL_CalculatePitch) (rhbz#1677152) - Fix CVE-2019-7635 (a buffer overread when blitting a BMP image with pixel colors out the palette) (rhbz#1677159) - Reject 2, 3, 5, 6, 7-bpp BMP images (rhbz#1677159) References: - https://bugs.mageia.org/show_bug.cgi?id=24496 - https://lists.fedoraproject.org/archives/list/
This release fixes a buffer overflow when processing RIFF/WAV files with in invalid MS ADPCM predictor.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-9ef30a3636 2019-03-29 19:07:28.731769 --------------------------------------------------------------------------------Name : SDL Product : Fedora 30 Version : 1.2.15 Release : 38.fc30 URL : http://www.libsdl.org/ Summary : A cross-platform multimedia library Description : Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. --------------------------------------------------------------------------------Update Information: This release fixes a buffer overflow when processing RIFF/WAV files with in invalid MS ADPCM predictor. --------------------------------------------------------------------------------References: [ 1 ] Bug #1676509 - CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676509 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-9ef30a3636' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
This release fixes a buffer overflow when processing RIFF/WAV files with in invalid MS ADPCM predictor.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-bf531902c8 2019-03-19 05:15:20.144155 --------------------------------------------------------------------------------Name : SDL Product : Fedora 29 Version : 1.2.15 Release : 37.fc29 URL : http://www.libsdl.org/ Summary : A cross-platform multimedia library Description : Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. --------------------------------------------------------------------------------Update Information: This release fixes a buffer overflow when processing RIFF/WAV files with in invalid MS ADPCM predictor. --------------------------------------------------------------------------------ChangeLog: * Tue Mar 12 2019 Petr Pisar - 1.2.15-37 - Fix CVE-2019-7577 completely (a buffer overread in MS_ADPCM_nibble and MS_ADPCM_decode on an invalid predictor) (bug #1676510) * Fri Feb 15 2019 Petr Pisar - 1.2.15-36 - Fix CVE-2019-7577 (a buffer overread in MS_ADPCM_decode) (bug #1676510) - Fix CVE-2019-7575 (a buffer overwrite in MS_ADPCM_decode) (bug #1676744) - Fix CVE-2019-7574 (a buffer overread in IMA_ADPCM_decode) (bug #1676750) - Fix CVE-2019-7572 (a buffer overread in IMA_ADPCM_nibble) (bug #1676754) - Fix CVE-2019-7572 (a buffer overwrite in IMA_ADPCM_nibble) (bug #1676754) - Fix CVE-2019-7573, CVE-2019-7576 (buffer overreads in InitMS_ADPCM) (bugs #1676752, #1676756) - Fix CVE-2019-7578 (a buffer overread in InitIMA_ADPCM) (bug #1676782) - Fix CVE-2019-7638, CVE-2019-7636 (buffer overflows when processing BMP images with too high number of colors) (bugs #1677144, #1677157) - Fix CVE-2019-7637 (an integer overflow in SDL_CalculatePitch) (bug #1677152) - Fix CVE-2019-7635 (a buffer overread when blitting aBMP image with pixel colors out the palette) (bug #1677159) - Reject 2, 3, 5, 6, 7-bpp BMP images (bug #1677159) * Mon Jan 14 2019 Petr Pisar - 1.2.15-35 - Remove manual updating of config.{guess,sub} - this has been part of %configure since 2013 - Use system glext.h to prevent from clashing on a GL_GLEXT_VERSION definition (bug #1662778) * Tue Aug 28 2018 Petr Pisar - 1.2.15-34 - Remove useless build-time dependency on audiofile-devel --------------------------------------------------------------------------------References: [ 1 ] Bug #1676509 - CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676509 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-bf531902c8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-6092f8c0dc 2019-03-02 01:20:05.967657 --------------------------------------------------------------------------------Name : SDL Product : Fedora 28 Version : 1.2.15 Release : 31.fc28 URL : http://www.libsdl.org/ Summary : A cross-platform multimedia library Description : Simple DirectMedia Layer (SDL) is a cross-platform multimedia library designed to provide fast access to the graphics frame buffer and audio device. --------------------------------------------------------------------------------Update Information: This release fixes various buffer overflows when parsing or processing damaged Waveform audio and BMP image files. --------------------------------------------------------------------------------ChangeLog: * Fri Feb 15 2019 Petr Pisar - 1.2.15-31 - Fix CVE-2019-7577 (a buffer overread in MS_ADPCM_decode) (bug #1676510) - Fix CVE-2019-7575 (a buffer overwrite in MS_ADPCM_decode) (bug #1676744) - Fix CVE-2019-7574 (a buffer overread in IMA_ADPCM_decode) (bug #1676750) - Fix CVE-2019-7572 (a buffer overread in IMA_ADPCM_nibble) (bug #1676754) - Fix CVE-2019-7572 (a buffer overwrite in IMA_ADPCM_nibble) (bug #1676754) - Fix CVE-2019-7573, CVE-2019-7576 (buffer overreads in InitMS_ADPCM) (bugs #1676752, #1676756) - Fix CVE-2019-7578 (a buffer overread in InitIMA_ADPCM) (bug #1676782) - Fix CVE-2019-7638, CVE-2019-7636 (buffer overflows when processing BMP images with too high number of colors) (bugs #1677144, #1677157) - Fix CVE-2019-7637 (an integer overflow in SDL_CalculatePitch) (bug #1677152) - Fix CVE-2019-7635 (a buffer overread when blitting a BMP image with pixel colors out the palette) (bug #1677159) - Reject 2, 3, 5, 6, 7-bpp BMP images (bug#1677159) --------------------------------------------------------------------------------References: [ 1 ] Bug #1676509 - CVE-2019-7577 SDL: Buffer over-read in function SDL_LoadWAV_RW in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676509 [ 2 ] Bug #1676743 - CVE-2019-7575 SDL: Heap based buffer overflow in function MS_ADPCM_decode in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676743 [ 3 ] Bug #1676749 - CVE-2019-7574 SDL: heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676749 [ 4 ] Bug #1676753 - CVE-2019-7572 SDL: Buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676753 [ 5 ] Bug #1676751 - CVE-2019-7573 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676751 [ 6 ] Bug #1676755 - CVE-2019-7576 SDL: heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676755 [ 7 ] Bug #1676781 - CVE-2019-7578 SDL: heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c https://bugzilla.redhat.com/show_bug.cgi?id=1676781 [ 8 ] Bug #1677143 - CVE-2019-7638 SDL: heap-based buffer over-read in Map1toN in video/SDL_pixels.c https://bugzilla.redhat.com/show_bug.cgi?id=1677143 [ 9 ] Bug #1677156 - CVE-2019-7636 SDL: heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c https://bugzilla.redhat.com/show_bug.cgi?id=1677156 [ 10 ] Bug #1677151 - CVE-2019-7637 SDL: heap-based buffer overflow in SDL_FillRect in video/SDL_surface.c https://bugzilla.redhat.com/show_bug.cgi?id=1677151 [ 11 ] Bug #1677158 - CVE-2019-7635 SDL: heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c https://bugzilla.redhat.com/show_bug.cgi?id=1677158 --------------------------------------------------------------------------------Thisupdate can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-6092f8c0dc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
- Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-93a43993aa 2018-07-16 18:24:45.238106 --------------------------------------------------------------------------------Name : soundtouch Product : Fedora 28 Version : 2.0.0 Release : 3.fc28 URL : http://www.surina.net/soundtouch/ Summary : Audio Processing library for changing Tempo, Pitch and Playback Rates Description : SoundTouch is a LGPL-licensed open-source audio processing library for changing the Tempo, Pitch and Playback Rates of audio streams or files. The SoundTouch library is suited for application developers writing sound processing tools that require tempo/pitch control functionality, or just for playing around with the sound effects. The SoundTouch library source kit includes an example utility SoundStretch which allows processing .wav audio files from a command-line interface. --------------------------------------------------------------------------------Update Information: - Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 --------------------------------------------------------------------------------ChangeLog: * Thu Jul 5 2018 Hans de Goede 2.0.0-3 - Security fix for CVE-2017-9258, CVE-2017-9259, CVE-2017-9260 (rhbz#1475759) --------------------------------------------------------------------------------References: [ 1 ] Bug #1475759 - CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 soundtouch: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1475759 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-93a43993aa' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages aresigned with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) SL7 x86_64 libvorbis-1.3.3-8.el7.1.i686.rpm libvorbis-1.3.3-8.el7.1.x86_64.rpm libvorbis-debuginfo-1.3.3-8.el7.1.i686.rpm libvorbis-debuginfo-1.3.3-8.el7.1.x86_64.rpm libvorbis-devel-1.3.3-8.el7.1.i686.rpm libvorbis-devel-1.3.3-8.el7.1.x86_64.rpm noarch libvorbis-devel-docs-1.3. [More...]. Synopsis: Important: libvorbis security update Advisory ID: SLSA-2018:1058-1 Issue Date: 2018-04-10 CVE Numbers: CVE-2018-5146 -- Security Fix(es): * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) -- SL7 x86_64 libvorbis-1.3.3-8.el7.1.i686.rpm libvorbis-1.3.3-8.el7.1.x86_64.rpm libvorbis-debuginfo-1.3.3-8.el7.1.i686.rpm libvorbis-debuginfo-1.3.3-8.el7.1.x86_64.rpm libvorbis-devel-1.3.3-8.el7.1.i686.rpm libvorbis-devel-1.3.3-8.el7.1.x86_64.rpm noarch libvorbis-devel-docs-1.3.3-8.el7.1.noarch.rpm - Scientific Linux Development Team . Update for libvorbis has been issued to fix out of bound write vulnerabilities on SL7 x86_64 systems. This patch is identified with advisory ID SLSA-2018:1058-1.. libvorbis security, audio processing, SL7 updates, Mozilla issues. . Severity: Important. LinuxSecurity.com Team
An update for libvorbis is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Important: libvorbis security update Advisory ID: RHSA-2018:0649-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2018:0649 Issue date: 2018-04-05 CVE Names: CVE-2018-5146 ==================================================================== 1. Summary: An update for libvorbis is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, noarch, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - noarch, x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, noarch, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, noarch, x86_64 3. Description: The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates. Security Fix(es): * Mozilla: Vorbis audio processing out of boundswrite (MFSA 2018-08) (CVE-2018-5146) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla Project for reporting this issue. Upstream acknowledges Richard Zhu via Trend Micro's Zero Day Initiative as the original reporter. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1557221 - CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: libvorbis-1.2.3-5.el6_9.1.src.rpm i386: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm x86_64: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): i386: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm noarch: libvorbis-devel-docs-1.2.3-5.el6_9.1.noarch.rpm x86_64: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: libvorbis-1.2.3-5.el6_9.1.src.rpm x86_64: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): noarch: libvorbis-devel-docs-1.2.3-5.el6_9.1.noarch.rpm x86_64: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: libvorbis-1.2.3-5.el6_9.1.src.rpm i386: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm ppc64: libvorbis-1.2.3-5.el6_9.1.ppc.rpm libvorbis-1.2.3-5.el6_9.1.ppc64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.ppc.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.ppc64.rpm s390x: libvorbis-1.2.3-5.el6_9.1.s390.rpm libvorbis-1.2.3-5.el6_9.1.s390x.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.s390.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.s390x.rpm x86_64: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux Server Optional (v. 6): i386: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm noarch: libvorbis-devel-docs-1.2.3-5.el6_9.1.noarch.rpm ppc64: libvorbis-debuginfo-1.2.3-5.el6_9.1.ppc.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.ppc64.rpm libvorbis-devel-1.2.3-5.el6_9.1.ppc.rpm libvorbis-devel-1.2.3-5.el6_9.1.ppc64.rpm s390x: libvorbis-debuginfo-1.2.3-5.el6_9.1.s390.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.s390x.rpm libvorbis-devel-1.2.3-5.el6_9.1.s390.rpm libvorbis-devel-1.2.3-5.el6_9.1.s390x.rpm x86_64: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: libvorbis-1.2.3-5.el6_9.1.src.rpm i386: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm x86_64: libvorbis-1.2.3-5.el6_9.1.i686.rpm libvorbis-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm Red Hat Enterprise Linux Workstation Optional (v.6): i386: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm noarch: libvorbis-devel-docs-1.2.3-5.el6_9.1.noarch.rpm x86_64: libvorbis-debuginfo-1.2.3-5.el6_9.1.i686.rpm libvorbis-debuginfo-1.2.3-5.el6_9.1.x86_64.rpm libvorbis-devel-1.2.3-5.el6_9.1.i686.rpm libvorbis-devel-1.2.3-5.el6_9.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2018-5146 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2018 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFaxoDBXlSAg2UNWIIRAvOxAJ9//Rt3ozE6tpe/W4MWI+kLqKw9zACfRdJf 7wTtOjPAGbv80SMAvnMgs/Q=fVvn -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Get the latest Linux and open source security news straight to your inbox.