GLSA-201412-40 : FLAC: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-40 FLAC: User-assisted execution of arbitrary code A stack-based buffer overflow flaw has been discovered in FLAC. Impact : A remote attacker could entice a user to open a specially crafted .flac file using an application...

Fedora 19 : flac-1.3.1-1.fc19 (2014-16272)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora Update for flac FEDORA-2014-16272

Check the version of flac SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868621";...

[SECURITY] Fedora 19 Update: flac-1.3.1-1.fc19

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

Fedora 21 : flac-1.3.1-1.fc21 (2014-16175)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 21 : mingw-flac-1.3.1-1.fc21 (2014-16148)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 19 : mingw-flac-1.3.1-1.fc19 (2014-16251)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 20 : mingw-flac-1.3.1-1.fc20 (2014-16270)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Mandriva Linux Security Advisory : flac (MDVSA-2014:239)

Updated flac packages fix security vulnerabilities : In libFLAC before 1.3.1, a stack overflow CVE-2014-8962 and a heap overflow CVE-2014-9028, which may result in arbitrary code execution, can be triggered by passing a maliciously crafted .flac file to the libFLAC decoder. %NASLMINLEVEL 70300 C...

Fedora Update for mingw-flac FEDORA-2014-16251

Check the version of mingw-flac SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868592";...

Fedora Update for mingw-flac FEDORA-2014-16270

Check the version of mingw-flac SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868588";...

[SECURITY] Fedora 21 Update: mingw-flac-1.3.1-1.fc21

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

[SECURITY] Fedora 20 Update: mingw-flac-1.3.1-1.fc20

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

[SECURITY] Fedora 19 Update: mingw-flac-1.3.1-1.fc19

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

openSUSE Security Update : flac (openSUSE-SU-2014:1588-1)

flac was updated to fix two security issues. These security issues were fixed : - Stack overflow may result in arbitrary code execution CVE-2014-8962. - Heap overflow via specially crafted .flac files CVE-2014-9028. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Fedora Update for flac FEDORA-2014-16258

Check the version of flac SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868564";...

[SECURITY] Fedora 20 Update: flac-1.3.1-1.fc20

FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...

Fedora 20 : flac-1.3.1-1.fc20 (2014-16258)

Security fix for CVE-2014-9028, CVE-2014-8962 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

SuSE 11.3 Security Update : flac (SAT Patch Number 10029)

flac was updated to fix two security issues : - Stack overflow may result in arbitrary code execution. CVE-2014-8962 - Heap overflow via specially crafted .flac files. CVE-2014-9028 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DLA 99-1] flac security update

Package : flac Version : 1.2.1-2+deb6u1 CVE ID : CVE-2014-8962 CVE-2014-9028 Michele Spagnuolo, of Google Security Team, and Miroslav Lichvar, of Red Hat, discovered two issues in flac, a library handling Free Lossless Audio Codec media: by providing a specially crafted FLAC file, an attacker cou...