Skip to content
OpenAdvisories
Unscored RHSA-2008:0270 3 CVEs

Red Hat Security Advisory: libvorbis security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 32

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as libvorbis 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::as libvorbis-debuginfo 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::as libvorbis-devel 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop libvorbis 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop libvorbis-debuginfo 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::desktop libvorbis-devel 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::es libvorbis 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::es libvorbis-debuginfo 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::es libvorbis-devel 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::ws libvorbis 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::ws libvorbis-debuginfo 1:1.0-10.el3
Red Hat · RHEL 3 enterprise_linux:3::ws libvorbis-devel 1:1.0-10.el3
Red Hat · RHEL 4 enterprise_linux:4::as libvorbis 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::as libvorbis-debuginfo 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::as libvorbis-devel 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop libvorbis 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop libvorbis-debuginfo 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::desktop libvorbis-devel 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es libvorbis 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es libvorbis-debuginfo 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::es libvorbis-devel 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws libvorbis 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws libvorbis-debuginfo 1:1.1.0-3.el4_6.1
Red Hat · RHEL 4 enterprise_linux:4::ws libvorbis-devel 1:1.1.0-3.el4_6.1
Red Hat · RHEL 5 enterprise_linux:5::client libvorbis 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::client libvorbis-debuginfo 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libvorbis 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libvorbis-debuginfo 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libvorbis-devel 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::server libvorbis 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::server libvorbis-debuginfo 1:1.1.2-3.el5_1.2
Red Hat · RHEL 5 enterprise_linux:5::server libvorbis-devel 1:1.1.2-3.el5_1.2

Vulnerabilities 3

  • Unscored —
    CVE-2008-1419

    Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attack…

    libvorbis libvorbisidec Debian
  • Unscored —
    CVE-2008-1420

    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows re…

    libvorbis Debian
  • Unscored —
    CVE-2008-1423

    Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote…

    libvorbis libvorbisidec Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440700
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440706
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440709
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0270.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-1419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1419
  • report
    https://access.redhat.com/security/cve/CVE-2008-1420
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1420
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1420
  • report
    https://access.redhat.com/security/cve/CVE-2008-1423
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1423
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1423