[SECURITY] Fedora 38 Update: oggvideotools-0.9.1-14.fc38
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-cf30e790ce
2023-09-05 00:40:06.815532
--------------------------------------------------------------------------------
Name : oggvideotools
Product : Fedora 38
Version : 0.9.1
Release : 14.fc38
URL : https://dev.streamnik.de/oggvideotools.html
Summary : Toolbox for manipulating Ogg video files
Description :
A toolbox for manipulating Ogg video files, which usually consist of a
video stream (Theora) and an audio stream (Vorbis). It includes a
number of handy command line tools for manipulating these video files,
such as for splitting the different streams.
--------------------------------------------------------------------------------
Update Information:
Trivial rebuild with a patch for the CVE.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 27 2023 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.9.1-14
- Add patch for CVE-2020-21724 (rhbz#2234730)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2234724 - CVE-2020-21722 oggvideotools: heap-use-after-free in
streamExtractor.cpp [fedora-38]
https://bugzilla.redhat.com/show_bug.cgi?id=2234724
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-cf30e790ce' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------