Date: Thu, 24 Feb 2022 21:05:48 GMT From: Christian Weisgerber <naddy@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: bea981c5dccc - main - security/vuxml: document CVE-2021-0561 for audio/flac Message-ID: <202202242105.21OL5mPI089977@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by naddy: URL: https://cgit.FreeBSD.org/ports/commit/?id=bea981c5dccc6e4cafcdbe282d5671ec4497f571 commit bea981c5dccc6e4cafcdbe282d5671ec4497f571 Author: Christian Weisgerber <naddy@FreeBSD.org> AuthorDate: 2022-02-24 20:51:43 +0000 Commit: Christian Weisgerber <naddy@FreeBSD.org> CommitDate: 2022-02-24 21:05:00 +0000 security/vuxml: document CVE-2021-0561 for audio/flac --- security/vuxml/vuln-2022.xml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml index aaea1f8ef6af..5a185576663e 100644 --- a/security/vuxml/vuln-2022.xml +++ b/security/vuxml/vuln-2022.xml @@ -1,3 +1,30 @@ + <vuln vid="5e1440c6-95af-11ec-b320-f8b156b6dcc8"> + <topic>flac -- fix encoder bug</topic> + <affects> + <package> + <name>flac</name> + <range><lt>1.3.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The FLAC 1.3.4 release reports:</p> + <blockquote cite="https://xiph.org/flac/changelog.html">; + <p>Fix 12 decoder bugs found by oss-fuzz.</p> + <p>Fix encoder bug CVE-2021-0561.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2021-0561</cvename> + <url>https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-0561</url>; + </references> + <dates> + <discovery>2022-02-20</discovery> + <entry>2022-02-24</entry> + </dates> + </vuln> + <vuln vid="022dde12-8f4a-11ec-83ac-080027415d17"> <topic>cyrus-sasl -- Escape password for SQL insert/update commands</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202202242105.21OL5mPI089977>