SUSE-SU-2015:1775-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2015:1775-1

Related

Published

2015-10-09T15:04:08Z

Modified

2015-10-09T15:04:08Z

Summary

Security update for vorbis-tools

Details

vorbis-tools was updated to fix several security issues.

A buffer overflow in aiff_open() that could be triggered by opening prepared malicious files (CVE-2015-6749, bsc#943795).
A division by zero and integer overflow by crafted WAV files was fixed (CVE-2014-9638, CVE-2014-9639, bnc#914439, bnc#914441).

References

Affected packages

Name: vorbis-tools
Purl: pkg:rpm/suse/vorbis-tools&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP3

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-174.1

{
    "binaries": [
        {
            "vorbis-tools": "1.1.1-174.1"
        }
    ]
}

Name: vorbis-tools
Purl: pkg:rpm/suse/vorbis-tools&distro=SUSE%20Linux%20Enterprise%20Desktop%2011%20SP4

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-174.1

{
    "binaries": [
        {
            "vorbis-tools": "1.1.1-174.1"
        }
    ]
}