From 1e73dc165c46c1c85f0a1989c9c06546ed929a25 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Mon, 18 Sep 2023 09:35:25 +0200 Subject: [PATCH] 1.3.3-11 Related: CVE-2020-22219 --- flac.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/flac.spec b/flac.spec index 6269261..4ba33cd 100644 --- a/flac.spec +++ b/flac.spec @@ -8,7 +8,7 @@ Summary: An encoder/decoder for the Free Lossless Audio Codec Name: flac Version: 1.3.3 -Release: 10%{?dist} +Release: 11%{?dist} License: BSD and GPLv2+ and GFDL Source0: https://downloads.xiph.org/releases/flac/flac-%{version}.tar.xz URL: https://www.xiph.org/flac/ @@ -149,6 +149,9 @@ make check %endif %changelog +* Mon Sep 18 2023 Miroslav Lichvar 1.3.3-11 +- don't free memory that is still used after realloc() error (CVE-2020-22219) + * Thu May 05 2022 Miroslav Lichvar 1.3.3-10 - handle end-of-stream when encoding with verification (CVE-2021-0561)