1.3.3-10

Related: CVE-2021-0561

flac.spec

@@ -8,7 +8,7 @@
 Summary: An encoder/decoder for the Free Lossless Audio Codec
 Name: flac
 Version: 1.3.3
-Release: 9%{?dist}
+Release: 10%{?dist}
 License: BSD and GPLv2+ and GFDL
 Source0: https://downloads.xiph.org/releases/flac/flac-%{version}.tar.xz
 URL: https://www.xiph.org/flac/
@@ -146,6 +146,9 @@ make check
 %endif
 
 %changelog
+* Thu May 05 2022 Miroslav Lichvar <mlichvar@redhat.com> 1.3.3-10
+- handle end-of-stream when encoding with verification (CVE-2021-0561)
+
 * Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.3.3-9
 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
   Related: rhbz#1991688