Read Time:26 Second

FEDORA-2025-23e4aeeb91

Packages in this update:

libxmp-4.6.1-2.fc41

Update description:

Latest upstream release. Changelog:

Fixes:

CVE-2023-45679: Attempt to free an uninitialized memory pointer in vorbis_deinit()
CVE-2023-45680: Null pointer dereference in vorbis_deinit()
CVE-2023-45681: Out of bounds heap buffer write
CVE-2023-45676: Multi-byte write heap buffer overflow in start_decoder()
CVE-2023-45677: Heap buffer out of bounds write in start_decoder()
CVE-2023-45682: Wild address read in vorbis_decode_packet_rest()

Read More

More Stories