Related: CVE-2020-22219
This commit is contained in:
Miroslav Lichvar 2023-09-18 09:35:25 +02:00
parent b23b1a195c
commit 1e73dc165c

View File

@ -8,7 +8,7 @@
Summary: An encoder/decoder for the Free Lossless Audio Codec
Name: flac
Version: 1.3.3
Release: 10%{?dist}
Release: 11%{?dist}
License: BSD and GPLv2+ and GFDL
Source0: https://downloads.xiph.org/releases/flac/flac-%{version}.tar.xz
URL: https://www.xiph.org/flac/
@ -149,6 +149,9 @@ make check
%endif
%changelog
* Mon Sep 18 2023 Miroslav Lichvar <mlichvar@redhat.com> 1.3.3-11
- don't free memory that is still used after realloc() error (CVE-2020-22219)
* Thu May 05 2022 Miroslav Lichvar <mlichvar@redhat.com> 1.3.3-10
- handle end-of-stream when encoding with verification (CVE-2021-0561)