RHSA-2007:0912: Important: libvorbis security update
The libvorbis package contains runtime libraries for use in programs thatsupport Ogg Voribs. Ogg Vorbis is a fully open, non-proprietary, patent-androyalty-free, general-purpose compressed audio format.Several flaws were found in the way libvorbis processed audio data. Anattacker could create a carefully crafted OGG audio file in such a way thatit could cause an application linked with libvorbis to crash or executearbitrary code when it was opened. (CVE-2007-3106, CVE-2007-4029,CVE-2007-4065, CVE-2007-4066)Users of libvorbis are advised to upgrade to this updated package, whichcontains backported patches that resolve these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2007:0912?
The severity of RHSA-2007:0912 is classified as critical due to vulnerabilities that may allow an attacker to execute arbitrary code.
How do I fix RHSA-2007:0912?
To fix RHSA-2007:0912, you should update the libvorbis package to the latest version available from your distribution's package manager.
What vulnerabilities are addressed in RHSA-2007:0912?
RHSA-2007:0912 addresses multiple flaws in libvorbis that involve improper processing of audio data, potentially leading to security risks.
Which versions of libvorbis are affected by RHSA-2007:0912?
RHSA-2007:0912 affects multiple versions of the libvorbis package prior to the patched release.
Is RHSA-2007:0912 a remote exploit vulnerability?
Yes, RHSA-2007:0912 could be exploited remotely through maliciously crafted audio files.