MGASA-2019-0059

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2019-0059.html

Import Source

https://advisories.mageia.org/MGASA-2019-0059.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2019-0059

Upstream

Published

2019-01-31T22:55:16Z

Modified

2026-04-16T01:45:33Z

Summary

Updated libvorbis packages fix security vulnerabilities

Details

The vorbis library version 1.3.6 fix security vulnerabilities:

CVE-2017-11735 libvorbis: NULL pointer dereference in vorbis_block_clear function in lib/block.c
CVE-2017-11333 libvorbis: Memory exhaustion in vorbis_analysis_wrote function in lib/block.c

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.3.6-1.mga6

{
    "section": "core"
}

source

"https://advisories.mageia.org/MGASA-2019-0059.json"