Red Hat Security AdvisoryRHSA-2018:0649
libvorbis security update
Released 2018-04-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvorbis-1:1.2.3-5.el6_9.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvorbis-devel-1:1.2.3-5.el6_9.1, libvorbis-devel-docs-1:1.2.3-5.el6_9.1
- Red Hat Enterprise Linux HPC Node (v. 6) libvorbis-1:1.2.3-5.el6_9.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvorbis-devel-1:1.2.3-5.el6_9.1, libvorbis-devel-docs-1:1.2.3-5.el6_9.1
- Red Hat Enterprise Linux Server (v. 6) libvorbis-1:1.2.3-5.el6_9.1, libvorbis-1:1.2.3-5.el6_9.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 6) libvorbis-devel-1:1.2.3-5.el6_9.1, libvorbis-devel-1:1.2.3-5.el6_9.1.ppc, libvorbis-devel-docs-1:1.2.3-5.el6_9.1
- Red Hat Enterprise Linux Workstation (v. 6) libvorbis-1:1.2.3-5.el6_9.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libvorbis-devel-1:1.2.3-5.el6_9.1, libvorbis-devel-docs-1:1.2.3-5.el6_9.1
Fixes 1 record
Priority MEDIUM 52
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.11905 · Published 2018-06-11 · Partial fix · 59.0.1, 52.7.2 +1 CWE-787