Important: libvorbis

2014-09-14T15:22:00
ID ALAS-2012-047
Type amazon
Reporter Amazon
Modified 2014-09-14T15:22:00

Description

Issue Overview:

A heap-based buffer overflow flaw was found in the way the libvorbis library parsed Ogg Vorbis media files. If a specially-crafted Ogg Vorbis media file was opened by an application using libvorbis, it could cause the application to crash or, possibly, execute arbitrary code with the privileges of the user running the application. (CVE-2012-0444 __)

Affected Packages:

libvorbis

Issue Correction:
Run yum update libvorbis to update your system.

New Packages:

i686:  
    libvorbis-debuginfo-1.2.3-4.6.amzn1.i686  
    libvorbis-1.2.3-4.6.amzn1.i686  
    libvorbis-devel-1.2.3-4.6.amzn1.i686

noarch:  
    libvorbis-devel-docs-1.2.3-4.6.amzn1.noarch

src:  
    libvorbis-1.2.3-4.6.amzn1.src

x86_64:  
    libvorbis-debuginfo-1.2.3-4.6.amzn1.x86_64  
    libvorbis-1.2.3-4.6.amzn1.x86_64  
    libvorbis-devel-1.2.3-4.6.amzn1.x86_64