Skip to content
OpenAdvisories
Medium ALSA-2022:8078 1 CVE

Moderate: flac security update

Published Nov 15, 2022 · Updated Oct 29, 2026

Summary

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: out of bound write in append_to_verify_fifo_interleaved_ of stream_encoder.c (CVE-2021-0561)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 3

ReleasePackageFixed in
AlmaLinux · 9 flac 1.3.3-10.el9
AlmaLinux · 9 flac-devel 1.3.3-10.el9
AlmaLinux · 9 flac-libs 1.3.3-10.el9

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2021-0561
  • report
    https://bugzilla.redhat.com/2057776
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-8078.html