RLSA-2023:5048

Synopsis

Important: flac security update

Description

FLAC stands for Free Lossless Audio Codec. FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, a command-line program to encode and decode FLAC files, and a command-line metadata editor for FLAC files.

Security Fix(es):

* flac: Remote Code Execution (RCE) via the bitwriter_grow_ function, by supplying crafted input to the encoder (CVE-2020-22219)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2235489

CVEs

CVE-2020-22219

Affected packages

Rocky Linux 9 x86_64 - AppStream

flac-debuginfo-0:1.3.3-10.el9_2.1.i686.rpm flac-0:1.3.3-10.el9_2.1.src.rpm flac-libs-debuginfo-0:1.3.3-10.el9_2.1.x86_64.rpm flac-libs-debuginfo-0:1.3.3-10.el9_2.1.i686.rpm flac-debuginfo-0:1.3.3-10.el9_2.1.x86_64.rpm flac-libs-0:1.3.3-10.el9_2.1.i686.rpm flac-debugsource-0:1.3.3-10.el9_2.1.i686.rpm flac-debugsource-0:1.3.3-10.el9_2.1.x86_64.rpm flac-libs-0:1.3.3-10.el9_2.1.x86_64.rpm

Rocky Linux 9 aarch64 - AppStream

flac-libs-0:1.3.3-10.el9_2.1.aarch64.rpm flac-0:1.3.3-10.el9_2.1.src.rpm flac-libs-debuginfo-0:1.3.3-10.el9_2.1.aarch64.rpm flac-debuginfo-0:1.3.3-10.el9_2.1.aarch64.rpm flac-debugsource-0:1.3.3-10.el9_2.1.aarch64.rpm

Rocky Linux 9 aarch64 - CRB

flac-devel-0:1.3.3-10.el9_2.1.aarch64.rpm flac-0:1.3.3-10.el9_2.1.aarch64.rpm

Rocky Linux 9 s390x - AppStream

flac-0:1.3.3-10.el9_2.1.src.rpm flac-debugsource-0:1.3.3-10.el9_2.1.s390x.rpm flac-libs-debuginfo-0:1.3.3-10.el9_2.1.s390x.rpm flac-debuginfo-0:1.3.3-10.el9_2.1.s390x.rpm flac-libs-0:1.3.3-10.el9_2.1.s390x.rpm

Rocky Linux 9 ppc64le - AppStream

flac-0:1.3.3-10.el9_2.1.src.rpm flac-libs-debuginfo-0:1.3.3-10.el9_2.1.ppc64le.rpm flac-libs-0:1.3.3-10.el9_2.1.ppc64le.rpm flac-debugsource-0:1.3.3-10.el9_2.1.ppc64le.rpm flac-debuginfo-0:1.3.3-10.el9_2.1.ppc64le.rpm

Rocky Linux 9 x86_64 - CRB

flac-devel-0:1.3.3-10.el9_2.1.x86_64.rpm flac-devel-0:1.3.3-10.el9_2.1.i686.rpm flac-0:1.3.3-10.el9_2.1.x86_64.rpm

Rocky Linux 9 s390x - CRB

flac-0:1.3.3-10.el9_2.1.s390x.rpm flac-devel-0:1.3.3-10.el9_2.1.s390x.rpm

Rocky Linux 9 ppc64le - CRB

flac-devel-0:1.3.3-10.el9_2.1.ppc64le.rpm flac-0:1.3.3-10.el9_2.1.ppc64le.rpm