Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-5146: An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. 1557221: CVE-2018-5146 Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | libvorbis | 1:1.3.3-8.amzn2.0.1 |
| Amazon Linux · 2 | libvorbis-debuginfo | 1:1.3.3-8.amzn2.0.1 |
| Amazon Linux · 2 | libvorbis-devel | 1:1.3.3-8.amzn2.0.1 |
| Amazon Linux · 2 | libvorbis-devel-docs | 1:1.3.3-8.amzn2.0.1 |
Vulnerabilities 1
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2018-5146.html