Red Hat Security AdvisoryRHSA-2020:1175
taglib security update
Released 2020-03-31 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) taglib-1.8-8.20130218git.el7
- Red Hat Enterprise Linux Client Optional (v. 7) taglib-devel-1.8-8.20130218git.el7, taglib-doc-1.8-8.20130218git.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) taglib-1.8-8.20130218git.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) taglib-devel-1.8-8.20130218git.el7, taglib-doc-1.8-8.20130218git.el7
- Red Hat Enterprise Linux Server (v. 7) taglib-1.8-8.20130218git.el7, taglib-1.8-8.20130218git.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) taglib-devel-1.8-8.20130218git.el7, taglib-devel-1.8-8.20130218git.el7.ppc, taglib-doc-1.8-8.20130218git.el7
- Red Hat Enterprise Linux Workstation (v. 7) taglib-1.8-8.20130218git.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) taglib-devel-1.8-8.20130218git.el7, taglib-doc-1.8-8.20130218git.el7
Fixes 1 record
Priority LOW 34
The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0295 · Published 2018-05-30 · Partial fix CWE-125
