int(3525)

Boletines de Vulnerabilidades


Múltiples desbordamientos de entero en Free Lossless Audio Codec libFLAC

Clasificación de la vulnerabilidad

Propiedad Valor
Nivel de Confianza Oficial
Impacto Obtener acceso
Dificultad Experto
Requerimientos del atacante Acceso remoto sin cuenta a un servicio estandar

Información sobre el sistema

Propiedad Valor
Fabricante afectado GNU/Linux
Software afectado Free Lossless Audio Codec libFLAC < 1.2.1

Descripción

Se han encontrado múltiples vulnerabilidades del tipo desbordamiento de entero en Free Lossless Audio Codec libFLAC en las versiones anteriores a la 1.2.1. La vulnerabilidad reside al permitir un direccionamiento ilegal de memoria.

Un atacante remoto podría ejecutar código arbitrario mediante un archivo FLAC especialmente diseñado.

Solución



Actualización de software

Red Hat (RHSA-2007:0975-3)
RHEL Desktop Workstation (v. 5 client)
Red Hat Desktop (v. 4)
Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux Desktop (v. 5 client)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux WS (v. 4)
https://rhn.redhat.com/

Mandriva (MDKSA-2007:214)

Corporate Server 3.0
X86
corporate/3.0/i586/flac-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/flac-xmms-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/libflac++2-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/libflac++2-devel-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/libflac4-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/libflac4-devel-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/liboggflac++0-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/liboggflac++0-devel-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/liboggflac1-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/i586/liboggflac1-devel-1.1.0-5.1.C30mdk.i586.rpm
corporate/3.0/SRPMS/flac-1.1.0-5.1.C30mdk.src.rpm
X86_64
corporate/3.0/x86_64/flac-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/flac-xmms-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64flac++2-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64flac++2-devel-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64flac4-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64flac4-devel-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64oggflac++0-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64oggflac++0-devel-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64oggflac1-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/x86_64/lib64oggflac1-devel-1.1.0-5.1.C30mdk.x86_64.rpm
corporate/3.0/SRPMS/flac-1.1.0-5.1.C30mdk.src.rpm

Mandriva Linux 2007
X86
2007.0/i586/flac-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/libflac++5-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/libflac++5-devel-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/libflac7-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/libflac7-devel-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/liboggflac++2-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/liboggflac++2-devel-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/liboggflac3-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/i586/liboggflac3-devel-1.1.2-7.1mdv2007.0.i586.rpm
2007.0/SRPMS/flac-1.1.2-7.1mdv2007.0.src.rpm
X86_64
2007.0/x86_64/flac-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64flac++5-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64flac++5-devel-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64flac7-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64flac7-devel-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64oggflac++2-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64oggflac++2-devel-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64oggflac3-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/x86_64/lib64oggflac3-devel-1.1.2-7.1mdv2007.0.x86_64.rpm
2007.0/SRPMS/flac-1.1.2-7.1mdv2007.0.src.rpm

Mandriva Linux 2007.1
X86
2007.1/i586/flac-1.1.4-1.1mdv2007.1.i586.rpm
2007.1/i586/libflac++6-1.1.4-1.1mdv2007.1.i586.rpm
2007.1/i586/libflac++6-devel-1.1.4-1.1mdv2007.1.i586.rpm
2007.1/i586/libflac8-1.1.4-1.1mdv2007.1.i586.rpm
2007.1/i586/libflac8-devel-1.1.4-1.1mdv2007.1.i586.rpm
2007.1/SRPMS/flac-1.1.4-1.1mdv2007.1.src.rpm
X86_64
2007.1/x86_64/flac-1.1.4-1.1mdv2007.1.x86_64.rpm
2007.1/x86_64/lib64flac++6-1.1.4-1.1mdv2007.1.x86_64.rpm
2007.1/x86_64/lib64flac++6-devel-1.1.4-1.1mdv2007.1.x86_64.rpm
2007.1/x86_64/lib64flac8-1.1.4-1.1mdv2007.1.x86_64.rpm
2007.1/x86_64/lib64flac8-devel-1.1.4-1.1mdv2007.1.x86_64.rpm
2007.1/SRPMS/flac-1.1.4-1.1mdv2007.1.src.rpm

Mandriva Linux 2008.0
X86
2008.0/i586/flac-1.2.0-1.1mdv2008.0.i586.rpm
2008.0/i586/libflac++-devel-1.2.0-1.1mdv2008.0.i586.rpm
2008.0/i586/libflac++6-1.2.0-1.1mdv2008.0.i586.rpm
2008.0/i586/libflac-devel-1.2.0-1.1mdv2008.0.i586.rpm
2008.0/i586/libflac8-1.2.0-1.1mdv2008.0.i586.rpm
2008.0/SRPMS/flac-1.2.0-1.1mdv2008.0.src.rpm
X86_64
2008.0/x86_64/flac-1.2.0-1.1mdv2008.0.x86_64.rpm
2008.0/x86_64/lib64flac++-devel-1.2.0-1.1mdv2008.0.x86_64.rpm
2008.0/x86_64/lib64flac++6-1.2.0-1.1mdv2008.0.x86_64.rpm
2008.0/x86_64/lib64flac-devel-1.2.0-1.1mdv2008.0.x86_64.rpm
2008.0/x86_64/lib64flac8-1.2.0-1.1mdv2008.0.x86_64.rpm
2008.0/SRPMS/flac-1.2.0-1.1mdv2008.0.src.rpm

Debian (DSA 1469-1)

Debian Linux 3.1
Source
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1.diff.gz
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1.orig.tar.gz
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1.dsc
alpha (DEC Alpha)
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_alpha.deb
amd64 (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_amd64.deb
arm (ARM)
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_arm.deb
hppa (HP PA RISC)
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_hppa.deb
i386 (Intel ia32)
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_i386.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_i386.deb
ia64 (Intel ia64)
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_ia64.deb
mips (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_mips.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_mips.deb
mipsel (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_mipsel.deb
powerpc (PowerPC)
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_powerpc.deb
s390 (IBM S/390)
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_s390.deb
sparc (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/f/flac/libflac6_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++0c102_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++4_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac1_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.1-5sarge1_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.1-5sarge1_sparc.deb

Debian Linux 4.0
Source
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8.dsc
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2.orig.tar.gz
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8.diff.gz
Paquetes independientes de arquitectura
http://security.debian.org/pool/updates/main/f/flac/libflac-doc_1.1.2-8_all.deb
alpha (DEC Alpha)
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_alpha.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_alpha.deb
amd64 (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_amd64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_amd64.deb
arm (ARM)
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_arm.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_arm.deb
hppa (HP PA RISC)
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_hppa.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_hppa.deb
i386 (Intel ia32)
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_i386.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_i386.deb
ia64 (Intel ia64)
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_ia64.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_ia64.deb
mips (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_mips.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_mips.deb
mipsel (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_mipsel.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_mipsel.deb
powerpc (PowerPC)
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_powerpc.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_powerpc.deb
s390 (IBM S/390)
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_s390.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_s390.deb
sparc (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/f/flac/libflac7_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac-dev_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++-dev_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++-dev_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac++2_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/libflac++5_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/flac_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/xmms-flac_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac3_1.1.2-8_sparc.deb
http://security.debian.org/pool/updates/main/f/flac/liboggflac-dev_1.1.2-8_sparc.deb

Identificadores estándar

Propiedad Valor
CVE CVE-2007-4619
BID 26042

Recursos adicionales

Red Hat Security Advisory (RHSA-2007:0975-3)
https://rhn.redhat.com/errata/RHSA-2007-0975.html

Mandriva Security Advisory (MDKSA-2007:214)
http://www.mandriva.com/security/advisories?name=MDKSA-2007:214

Debian Security Advisory (DSA 1469-1)
http://lists.debian.org/debian-security-announce/debian-security-announce-2008/msg00029.html

Histórico de versiones

Versión Comentario Fecha
1.0 Aviso emitido 2007-10-24
1.1 Aviso emitido por Mandriva (MDKSA-2007:214) 2007-11-15
1.2 Aviso emitido por Debian (DSA 1469-1) 2008-01-22

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT