Summary
[1.32.9-1]
- Rebase to 1.32.9, includes patch for CVE-2024-10573
Resolves: RHEL-65445
[1.26.2-6]
- Add patch for CVE-2024-10573
Resolves: RHEL-65445
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | mpg123 | 0:1.32.9-1.el9_5 |
| Oracle Linux · 9 | mpg123-devel | 0:1.32.9-1.el9_5 |
| Oracle Linux · 9 | mpg123-libs | 0:1.32.9-1.el9_5 |
| Oracle Linux · 9 | mpg123-plugins-pulseaudio | 0:1.32.9-1.el9_5 |
Vulnerabilities 1
-
Medium 6.7
Mpg123: buffer overflow when writing decoded pcm samples
An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The compl…