Affected: AlmaLinux:8: vorbis-tools

The vorbis-tools packages provide an encoder, a decoder, a playback tool, and a comment editor for Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format.

Security Fix(es):

* vorbis-tools: Buffer Overflow vulnerability (CVE-2023-43361)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

Affected: openEuler:22.03-LTS-SP1: vorbis-tools, openEuler:24.03-LTS: vorbis-tools, openEuler:22.03-LTS-SP4: vorbis-tools, openEuler:22.03-LTS-SP3: vorbis-tools, openEuler:20.03-LTS-SP4: vorbis-tools

Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as audio representations such as MPEG-4 (AAC), and similar to, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC. Security Fix(es): Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.(CVE-2023-43361)

vorbis-tools-1.4.2-2.1 on GA media

Security update for vorbis-tools

Affected: Ubuntu:16.04:LTS: vorbis-tools, Ubuntu:18.04:LTS: vorbis-tools, Ubuntu:20.04:LTS: vorbis-tools, Ubuntu:22.04:LTS: vorbis-tools, Ubuntu:24.04:LTS: vorbis-tools, Ubuntu:25.10: vorbis-tools, Ubuntu:26.04:LTS: vorbis-tools

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Komponenten von Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.