Most recent entries from all

ALSA-2019:3703 — Low: libvorbis security update

Affected: AlmaLinux:8: libvorbis, AlmaLinux:8: libvorbis-devel, AlmaLinux:8: libvorbis-devel-docs

The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.

Security Fix(es):

* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)

* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2020-03314

Withdrawn: BELL-CVE-2018-10393 — CVE-2018-10393 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2018-10108

EUVD-2026-64638

fkie_cve-2018-10393

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

GHSA-w834-9cg6-cm69

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

gsd-2018-10393

msrc_CVE-2018-10393 — bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

msrc_CVE-2018-10393

openSUSE-SU-2024:11009-1 — libvorbis-devel-1.3.7-1.6 on GA media

libvorbis-devel-1.3.7-1.6 on GA media

SUSE-SU-2018:1321-1 — Security update for libvorbis

Security update for libvorbis

UBUNTU-CVE-2018-10393

Affected: Ubuntu:Pro:16.04:LTS: libvorbis, Ubuntu:18.04:LTS: libvorbis

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.