Test ID:	1.3.6.1.4.1.25623.1.0.59839
Category:	Fedora Local Security Checks
Title:	Fedora Core 7 FEDORA-2007-2596 (flac)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to flac announced via advisory FEDORA-2007-2596. FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line metadata editor for FLAC files and input plugins for various music players. ChangeLog: * Wed Oct 17 2007 - Bastien Nocera - 1.2.1-1 - Update to 1.2.1 to fix CVE-2007-4619 (#332571) References: [ 1 ] Bug #332571 - CVE-2007-4619 FLAC Integer overflows [F7] https://bugzilla.redhat.com/show_bug.cgi?id=332571 [ 2 ] CVE-2007-4619 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4619 Updated packages: 1800a3d469a26429b8544b984c23b8ca248c31ae flac-devel-1.2.1-1.fc7.ppc64.rpm 5896fa90cd42c2dc43ea35e6f673aca1be1624cb flac-1.2.1-1.fc7.ppc64.rpm b26e20b8c0c71d78b012846dc5336016ba38ca7c flac-debuginfo-1.2.1-1.fc7.ppc64.rpm c0f835fe0e5f2ee03f6f060b7ac95960d2f75c28 flac-1.2.1-1.fc7.i386.rpm 04bd266ea646162c1580c05018e9bc3a6392215c flac-debuginfo-1.2.1-1.fc7.i386.rpm 22825f84f37cc5042039319b22c47ea54f702ab7 flac-devel-1.2.1-1.fc7.i386.rpm d007df3ca121de6ab406896ee98c0d084751d1ca flac-1.2.1-1.fc7.x86_64.rpm 574da7eda042159ae6a018c965c0a501d3670b5b flac-devel-1.2.1-1.fc7.x86_64.rpm 26095ff1e3a1162c912b1b3706b5d05a505dd566 flac-debuginfo-1.2.1-1.fc7.x86_64.rpm 7631a3cd7b4c7220fc00fa1f5dcffc231f5ddafc flac-1.2.1-1.fc7.ppc.rpm 59a2e3a478a736267fbd4577086d38576d289519 flac-debuginfo-1.2.1-1.fc7.ppc.rpm 634fe5756f1d9829a8c7500ddf1d04e0c706b9ce flac-devel-1.2.1-1.fc7.ppc.rpm 4fea3873d077f557b66dc9a7ff091f53e393e6ff flac-1.2.1-1.fc7.src.rpm This update can be installed with the yum update program. Use su -c 'yum update flac' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. Solution: Apply the appropriate updates. https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2007-2596 Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-4619 BugTraq ID: 26042 http://www.securityfocus.com/bid/26042 Debian Security Information: DSA-1469 (Google Search) http://www.debian.org/security/2008/dsa-1469 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00035.html http://security.gentoo.org/glsa/glsa-200711-15.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=608 http://www.mandriva.com/security/advisories?name=MDKSA-2007:214 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10571 http://www.redhat.com/support/errata/RHSA-2007-0975.html http://securitytracker.com/id?1018815 http://secunia.com/advisories/27210 http://secunia.com/advisories/27223 http://secunia.com/advisories/27355 http://secunia.com/advisories/27399 http://secunia.com/advisories/27507 http://secunia.com/advisories/27601 http://secunia.com/advisories/27625 http://secunia.com/advisories/27628 http://secunia.com/advisories/27780 http://secunia.com/advisories/27878 http://secunia.com/advisories/28548 SuSE Security Announcement: SUSE-SR:2007:022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html http://www.ubuntu.com/usn/usn-540-1 http://www.vupen.com/english/advisories/2007/3483 http://www.vupen.com/english/advisories/2007/3484 http://www.vupen.com/english/advisories/2007/4061 XForce ISS Database: flac-media-files-bo(37187) https://exchange.xforce.ibmcloud.com/vulnerabilities/37187
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.