stable

vorbis-tools-1.4.0-22.fc23

FEDORA-2015-14664 created by kdudka 10 years ago for Fedora 23
  • oggenc: fix large alloca on bad AIFF input (CVE-2015-6749)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-14664

This update has been submitted for testing by kdudka.

10 years ago

This update has been pushed to testing

10 years ago
User Icon pbrobinson commented & provided feedback 10 years ago
karma

Seems OK

BZ#1258424 vorbis-tools: Bufer overflow in aiff_open function
BZ#1258443 CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow
BZ#1258444 CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow [fedora-all]
BZ#1258427 vorbis-tools: Bufer overflow in aiff_open function [fedora-all]
User Icon chr77 commented & provided feedback 10 years ago
karma

Works for me

This update has been submitted for stable by bodhi.

10 years ago
User Icon kuosmanen commented & provided feedback 10 years ago
karma

no problems spotted

User Icon kdudka commented & provided feedback 10 years ago

Thanks for the feedback!

This update has been pushed to stable

10 years ago

Please log in to add feedback.

Metadata
Type
security
Severity
low
Karma
3
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
10 years ago
in testing
10 years ago
in stable
10 years ago
BZ#1258424 vorbis-tools: Bufer overflow in aiff_open function
0
1
BZ#1258427 vorbis-tools: Bufer overflow in aiff_open function [fedora-all]
0
1
BZ#1258443 CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow
0
1
BZ#1258444 CVE-2015-6749 vorbis-tools: invalid AIFF file causes alloca() buffer overflow [fedora-all]
0
1

Automated Test Results