Updated flac packages fix security vulnerability

The updated packages fix a security vulnerability: Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. CVE-2020-22219...

PT-2023-36331 · Flac · Flac

Name of the Vulnerable Software and Affected Versions: flac versions prior to 1.4.0 Description: A Buffer Overflow issue exists in the bitwriter grow function, allowing remote attackers to execute arbitrary code through crafted input to the encoder. Recommendations: For versions prior to 1.4.0,...

GLSA-202309-11 : libsndfile: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-11 libsndfile: Multiple Vulnerabilities - A heap buffer overflow vulnerability in msadpcmdecodeblock of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file. CVE-2021-3246 - An out-of-bounds...

CVE-2020-22219 affecting package flac for versions less than 1.4.3-1

CVE-2020-22219 affecting package flac for versions less than 1.4.3-1. An upgraded version of the package is available that resolves this issue...

Debian: Security Advisory (DLA-3581-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3581-1] flac security update

Debian LTS Advisory DLA-3581-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton September 25, 2023 https://wiki.debian.org/LTS Package : flac Version : 1.3.2-3+deb10u3 CVE ID : CVE-2020-22219 A buffer overflow vulnerability was found in FLAC, a free lossless audio...

DLA-3581-1 flac - security update

Bulletin has no description...

USN-6360-2 flac vulnerability

USN-6360-1 fixed a vulnerability in FLAC. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that FLAC incorrectly handled encoding certain files. A remote attacker could use this issue to cause...

USN-6360-2: FLAC vulnerability

USN-6360-1 fixed a vulnerability in FLAC. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that FLAC incorrectly handled encoding certain files. A remote attacker could use this issue to cause...

Ubuntu: Security Advisory (USN-6360-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 ESM : FLAC vulnerability (USN-6360-2)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6360-2 advisory. USN-6360-1 fixed a vulnerability in FLAC. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS...

SUSE-SU-2023:3688-1 Security update for gstreamer-plugins-good

This update for gstreamer-plugins-good fixes the following issues: - CVE-2021-3497: Matroskademux: Fix extraction of multichannel WavPack bsc1184739. - CVE-2022-1920: Fixed integer overflow in WavPack header handling code bsc1201688. - CVE-2022-1921: Fixed integer overflow resulting in heap...

Debian: Security Advisory (DSA-5500-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: flac / flac-devel / flac-devel-32bit / flac-doc / libFLAC++6 / etc (SUSE-SU-2023:3635-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3635-1 advisory. - CVE-2020-22219: Fixed a buffer overflow in function bitwritergrow which might allow a remote attacker t...

Debian DSA-5500-1 : flac - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5500 advisory. - Buffer Overflow vulnerability in function bitwritergrow in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder. CVE-2020-222...

[SECURITY] [DSA 5500-1] flac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5500-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 18, 2023 https://www.debian.org/security/faq -...

SUSE-SU-2023:3635-1 Security update for flac

This update for flac fixes the following issues: - CVE-2020-22219: Fixed a buffer overflow in function bitwritergrow which might allow a remote attacker to run arbitrary code via crafted input to the encoder. bsc1214615...

DSA-5500-1 flac - security update

Bulletin has no description...

Fedora: Security Advisory for flac (FEDORA-2023-bf8423a373)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: flac-1.3.4-3.fc37

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...