Summary
[1.25.10-2]
- Rebase to 1.32.9, includes patch for CVE-2024-10573
- Resolves: RHEL-65443
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | mpg123 | 0:1.32.9-1.el8_10 |
| Oracle Linux · 8 | mpg123-devel | 0:1.32.9-1.el8_10 |
| Oracle Linux · 8 | mpg123-libs | 0:1.32.9-1.el8_10 |
| Oracle Linux · 8 | mpg123-plugins-pulseaudio | 0:1.32.9-1.el8_10 |
Vulnerabilities 1
-
Medium 6.7
Mpg123: buffer overflow when writing decoded pcm samples
An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The compl…