Red Hat Security AdvisoryRHSA-2018:1058
libvorbis security update
Released 2018-04-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvorbis-1:1.3.3-8.el7.1
- Red Hat Enterprise Linux Client Optional (v. 7) libvorbis-devel-1:1.3.3-8.el7.1, libvorbis-devel-docs-1:1.3.3-8.el7.1
- Red Hat Enterprise Linux ComputeNode (v. 7) libvorbis-1:1.3.3-8.el7.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvorbis-devel-1:1.3.3-8.el7.1, libvorbis-devel-docs-1:1.3.3-8.el7.1
- Red Hat Enterprise Linux Server (v. 7) libvorbis-1:1.3.3-8.el7.1, libvorbis-1:1.3.3-8.el7.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libvorbis-devel-1:1.3.3-8.el7.1, libvorbis-devel-1:1.3.3-8.el7.1.ppc, libvorbis-devel-docs-1:1.3.3-8.el7.1
- Red Hat Enterprise Linux Workstation (v. 7) libvorbis-1:1.3.3-8.el7.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvorbis-devel-1:1.3.3-8.el7.1, libvorbis-devel-docs-1:1.3.3-8.el7.1
Fixes 1 record
Priority MEDIUM 52
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.11905 · Published 2018-06-11 · Partial fix · 59.0.1, 52.7.2 +1 CWE-787