Advisories » MGASA-2015-0051

Updated vorbis-tools package fixes security vulnerability

Publication date: 05 Feb 2015
Modification date: 05 Feb 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-9640

Description

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial
of service (out-of-bounds read) via a crafted raw file (CVE-2014-9640).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=15164
• https://lists.fedoraproject.org/pipermail/package-announce/2015-January/148852.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9640

SRPMS

4/core

• vorbis-tools-1.4.0-6.1.mga4