libvorbis-1.1.2-3.6.0.1.AXS3

エラータID: AXSA:2012-272:01

Release date: 
Wednesday, March 7, 2012 - 12:43
Subject: 
libvorbis-1.1.2-3.6.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel.
The libvorbis package contains runtime libraries for use in programs that support Ogg Voribs.
Security issues fixed with this release:
CVE-2012-0444
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted Ogg Vorbis file.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libvorbis-1.1.2-3.6.0.1.AXS3.src.rpm
    MD5: 7d3d2dd61fb5e9813e014a75b8449a2f
    SHA-256: 9ea7579e6124c1f6ee2c15c17a38f35b87db653db59caec8a0ebbe6be71f2f12
    Size: 1.28 MB

Asianux Server 3 for x86
  1. libvorbis-1.1.2-3.6.0.1.AXS3.i386.rpm
    MD5: e80a5b45cda55dacc65879b91f15abcb
    SHA-256: 74a9fb0140b1cec3d7e18acca73339316da42d4db2e5163ca48c3cfebbeb07f8
    Size: 191.98 kB
  2. libvorbis-devel-1.1.2-3.6.0.1.AXS3.i386.rpm
    MD5: b0c3ae0e2266ca6f7256380f2b4278ea
    SHA-256: 609becf199d0cc53819afac1fc5a185b9aaf3a4f2f5f1d6877bff1cd2ea33ef3
    Size: 546.08 kB

Asianux Server 3 for x86_64
  1. libvorbis-1.1.2-3.6.0.1.AXS3.x86_64.rpm
    MD5: 1728366ab92de2c96e70b7450c953778
    SHA-256: 8332f3f7d54290c177eac337de60ddb7609ebb84f9c87d3ab4d7ef488079bc41
    Size: 208.20 kB
  2. libvorbis-devel-1.1.2-3.6.0.1.AXS3.x86_64.rpm
    MD5: 0b8fd478085673d46b7eedb35a03f9ff
    SHA-256: bd895dcd7ff95b0e197bbdb81b9754bb7302f6550374e593cd7d5aa536ce6224
    Size: 558.59 kB