Release date:
2026-08-31 16:24:58 UTC
Description:
* SECURITY UPDATE: double free when growing the bit writer fails
- debian/patches/CVE-2020-22219.patch: add _nofree variants of the
safe_realloc helpers and use them where the caller keeps its own
pointer on failure, so bitwriter_grow_() no longer leaves a freed
bw->buffer for FLAC__bitwriter_free() to release again
(upstream 21fe95ee82).
- CVE-2020-22219
Updated packages:
-
flac_1.3.2-1ubuntu0.1+tuxcare.els1_amd64.deb
sha:8477f0578969f27a3c56ef790b5a4be6e098ea6e
-
libflac++-dev_1.3.2-1ubuntu0.1+tuxcare.els1_amd64.deb
sha:74e8e046c5c00066bb7930e41a02358a96ed421b
-
libflac++6v5_1.3.2-1ubuntu0.1+tuxcare.els1_amd64.deb
sha:ef4150b6c3ebe4b8a4daf00bb7cfd4a2146fd6ea
-
libflac-dev_1.3.2-1ubuntu0.1+tuxcare.els1_amd64.deb
sha:5bba95758b6a36c7854d9c054825760ef5a6bf90
-
libflac-doc_1.3.2-1ubuntu0.1+tuxcare.els1_all.deb
sha:dfef0997c6ac8c18ae896f33ce18eaf875d08868
-
libflac8_1.3.2-1ubuntu0.1+tuxcare.els1_amd64.deb
sha:b4c5a4f00d484a2c1e7427439c2c516828690e01
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
