[SECURITY] Fedora 37 Update: oggvideotools-0.9.1-13.fc37
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-154d731f46
2023-09-05 00:46:10.109263
--------------------------------------------------------------------------------
Name : oggvideotools
Product : Fedora 37
Version : 0.9.1
Release : 13.fc37
URL : https://dev.streamnik.de/oggvideotools.html
Summary : Toolbox for manipulating Ogg video files
Description :
A toolbox for manipulating Ogg video files, which usually consist of a
video stream (Theora) and an audio stream (Vorbis). It includes a
number of handy command line tools for manipulating these video files,
such as for splitting the different streams.
--------------------------------------------------------------------------------
Update Information:
Trivial rebuild with a patch for the CVE.
--------------------------------------------------------------------------------
ChangeLog:
* Sun Aug 27 2023 Zbigniew J��drzejewski-Szmek <zbyszek(a)in.waw.pl> - 0.9.1-13
- Add patch for CVE-2020-21724 (rhbz#2234729)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2234723 - CVE-2020-21722 oggvideotools: heap-use-after-free in
streamExtractor.cpp [fedora-37]
https://bugzilla.redhat.com/show_bug.cgi?id=2234723
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-154d731f46' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------