- Vulnerability/
- USN-6360-2
USN-6360-2: FLAC vulnerability
First published: Fri Sep 22 2023(Updated: )
USN-6360-1 fixed a vulnerability in FLAC. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. Original advisory details: It was discovered that FLAC incorrectly handled encoding certain files. A remote attacker could use this issue to cause FLAC to crash, resulting in a denial of service, or possibly execute arbitrary code.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/flac | <1.3.2-1ubuntu0.1+esm1 | 1.3.2-1ubuntu0.1+esm1 |
| Ubuntu Linux | =18.04 | |
| All of | ||
| ubuntu/libflac8 | <1.3.2-1ubuntu0.1+esm1 | 1.3.2-1ubuntu0.1+esm1 |
| Ubuntu Linux | =18.04 | |
| All of | ||
| ubuntu/flac | <1.3.1-4ubuntu0.1~esm2 | 1.3.1-4ubuntu0.1~esm2 |
| Ubuntu Linux | =16.04 | |
| All of | ||
| ubuntu/libflac8 | <1.3.1-4ubuntu0.1~esm2 | 1.3.1-4ubuntu0.1~esm2 |
| Ubuntu Linux | =16.04 | |
| All of | ||
| ubuntu/flac | <1.3.0-2ubuntu0.14.04.1+esm2 | 1.3.0-2ubuntu0.14.04.1+esm2 |
| Ubuntu Linux | =14.04 | |
| All of | ||
| ubuntu/libflac8 | <1.3.0-2ubuntu0.14.04.1+esm2 | 1.3.0-2ubuntu0.14.04.1+esm2 |
| Ubuntu Linux | =14.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What vulnerability does USN-6360-2 address?
USN-6360-2 addresses a vulnerability in FLAC.
Which versions of Ubuntu are affected by USN-6360-2?
USN-6360-2 affects Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS.
What is the severity of the vulnerability fixed by USN-6360-2?
The severity of the vulnerability fixed by USN-6360-2 is not specified.
How can I fix the vulnerability addressed by USN-6360-2?
To fix the vulnerability addressed by USN-6360-2, update the flac and libflac8 packages to the specified versions for your Ubuntu version.
Where can I find more information about USN-6360-2?
You can find more information about USN-6360-2 on the Ubuntu security website.
- agent/severity
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/title
- agent/event
- agent/description
- agent/references
- agent/trending
- agent/source
- agent/tags
- collector/usn
- source/Ubuntu
- anchor-related/USN-6360-1
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu linux
- version/ubuntu linux/18.04
- version/ubuntu linux/16.04
- version/ubuntu linux/14.04