High ELSA-2018-1058 1 CVE

Important: libvorbis security update (Oracle Linux 7)

Published Apr 17, 2018 · Updated Apr 17, 2018

Ecosystem: Oracle Linux

Summary

[1.3.3-8.1]
- Backport fix for CVE-2018-5146

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libvorbis	1:1.3.3-8.el7.1
Oracle Linux · 7	libvorbis-devel	1:1.3.3-8.el7.1
Oracle Linux · 7	libvorbis-devel-docs	1:1.3.3-8.el7.1

Vulnerabilities 1

Unscored —

CVE-2018-5146 Public exploit EPSS 12%

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jun 11, 2018