Stay Secure with the Latest Linux Advisories

security advisorycritical issuemageia

Mageia 8: MGASA-2022-0085 Critical Flac Local Info Disclosure

In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2021-0561) . MGASA-2022-0085 - Updated flac packages fix security vulnerability Publication date: 06 Mar 2022 URL: https://advisories.mageia.org/MGASA-2022-0085.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-0561 In append_to_verify_fifo_interleaved_ of stream_encoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2021-0561) References: - https://bugs.mageia.org/show_bug.cgi?id=30098 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./thread/EWXBVMPPSL377I7YM55ZYXVKVMYOKES2/ - https://www.cve.org/CVERecord?id=CVE-2021-0561 SRPMS: - 8/core/flac-1.3.3-3.1.mga8 . Fedora 2022-0034 enhances mp3 libraries to rectify vulnerabilities related to unauthorized data exposure without requiring elevated access rights.. Mageia Security Advisory, Flac Local Information Disclosure, Critical Security Update. . Severity: Critical. LinuxSecurity.com Team

Mar 06, 2022 •Critical Mageia