(RHSA-2023:5046) Important: flac security update

2023-09-1112:36:49

access.redhat.com

flac

rce

security update

cve-2020-22219

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

38.4%

JSON

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64leflac-debuginfo< 1.3.2-9.el8_8.1flac-debuginfo-1.3.2-9.el8_8.1.ppc64le.rpm
RedHat8s390xflac-libs-debuginfo< 1.3.2-9.el8_8.1flac-libs-debuginfo-1.3.2-9.el8_8.1.s390x.rpm
RedHat8x86_64flac-devel< 1.3.2-9.el8_8.1flac-devel-1.3.2-9.el8_8.1.x86_64.rpm
RedHat8i686flac-libs-debuginfo< 1.3.2-9.el8_8.1flac-libs-debuginfo-1.3.2-9.el8_8.1.i686.rpm
RedHat8i686flac-devel< 1.3.2-9.el8_8.1flac-devel-1.3.2-9.el8_8.1.i686.rpm
RedHat8ppc64leflac< 1.3.2-9.el8_8.1flac-1.3.2-9.el8_8.1.ppc64le.rpm
RedHat8s390xflac-debugsource< 1.3.2-9.el8_8.1flac-debugsource-1.3.2-9.el8_8.1.s390x.rpm
RedHat8aarch64flac-debuginfo< 1.3.2-9.el8_8.1flac-debuginfo-1.3.2-9.el8_8.1.aarch64.rpm
RedHat8i686flac-libs< 1.3.2-9.el8_8.1flac-libs-1.3.2-9.el8_8.1.i686.rpm
RedHat8ppc64leflac-debugsource< 1.3.2-9.el8_8.1flac-debugsource-1.3.2-9.el8_8.1.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	ppc64le	flac-debuginfo	< 1.3.2-9.el8_8.1	flac-debuginfo-1.3.2-9.el8_8.1.ppc64le.rpm
RedHat	8	s390x	flac-libs-debuginfo	< 1.3.2-9.el8_8.1	flac-libs-debuginfo-1.3.2-9.el8_8.1.s390x.rpm
RedHat	8	x86_64	flac-devel	< 1.3.2-9.el8_8.1	flac-devel-1.3.2-9.el8_8.1.x86_64.rpm
RedHat	8	i686	flac-libs-debuginfo	< 1.3.2-9.el8_8.1	flac-libs-debuginfo-1.3.2-9.el8_8.1.i686.rpm
RedHat	8	i686	flac-devel	< 1.3.2-9.el8_8.1	flac-devel-1.3.2-9.el8_8.1.i686.rpm
RedHat	8	ppc64le	flac	< 1.3.2-9.el8_8.1	flac-1.3.2-9.el8_8.1.ppc64le.rpm
RedHat	8	s390x	flac-debugsource	< 1.3.2-9.el8_8.1	flac-debugsource-1.3.2-9.el8_8.1.s390x.rpm
RedHat	8	aarch64	flac-debuginfo	< 1.3.2-9.el8_8.1	flac-debuginfo-1.3.2-9.el8_8.1.aarch64.rpm
RedHat	8	i686	flac-libs	< 1.3.2-9.el8_8.1	flac-libs-1.3.2-9.el8_8.1.i686.rpm
RedHat	8	ppc64le	flac-debugsource	< 1.3.2-9.el8_8.1	flac-debugsource-1.3.2-9.el8_8.1.ppc64le.rpm