Fedora alert FEDORA-2014-16175 (flac)
| From: | updates@fedoraproject.org | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 21 Update: flac-1.3.1-1.fc21 | |
| Date: | Sat, 13 Dec 2014 09:41:11 +0000 | |
| Message-ID: | <20141213094135.ED5D660D00B4@bastion01.phx2.fedoraproject.org> |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2014-16175 2014-12-03 05:43:35 -------------------------------------------------------------------------------- Name : flac Product : Fedora 21 Version : 1.3.1 Release : 1.fc21 URL : http://www.xiph.org/flac/ Summary : An encoder/decoder for the Free Lossless Audio Codec Description : FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line metadata editor for FLAC files and input plugins for various music players. This package contains the command-line tools and documentation. -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2014-9028, CVE-2014-8962 -------------------------------------------------------------------------------- ChangeLog: * Thu Nov 27 2014 Miroslav Lichvar <mlichvar@redhat.com> 1.3.1-1 - update to 1.3.1 (CVE-2014-8962, CVE-2014-9028) -------------------------------------------------------------------------------- References: [ 1 ] Bug #1167236 - CVE-2014-8962 flac: Heap buffer read overflow when processing ID3V2 metadata https://bugzilla.redhat.com/show_bug.cgi?id=1167236 [ 2 ] Bug #1167741 - CVE-2014-9028 flac: Heap buffer write overflow in read_residual_partitioned_rice_ https://bugzilla.redhat.com/show_bug.cgi?id=1167741 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update flac' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list package-announce@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/package-...