Skip to content
OpenAdvisories
Low ALAS2-2020-1460 1 CVE

Low: taglib security update (Amazon Linux 2)

Published Jul 14, 2020 · Updated Jul 17, 2020

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2018-11439: The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file. 1584868: CVE-2018-11439 taglib: heap-based buffer over-read via a crafted audio file

Fixed packages 4

ReleasePackageFixed in
Amazon Linux · 2 taglib 0:1.8-8.20130218git.amzn2
Amazon Linux · 2 taglib-debuginfo 0:1.8-8.20130218git.amzn2
Amazon Linux · 2 taglib-devel 0:1.8-8.20130218git.amzn2
Amazon Linux · 2 taglib-doc 0:1.8-8.20130218git.amzn2

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2018-11439.html