(RHSA-2008:0235) Important: speex security update

2008-04-1600:00:00

access.redhat.com

0.068 Low

EPSS

Percentile

93.9%

JSON

Speex is a patent-free compression format designed especially for speech.
The Speex package contains a library for handling Speex files and sample
encoder and decoder implementations using this library.

The Speex library was found to not properly validate input values read from
the Speex files headers. An attacker could create a malicious Speex file
that would crash an application or, possibly, allow arbitrary code
execution with the privileges of the application calling the Speex library.
(CVE-2008-1686)

All users of speex are advised to upgrade to these updated packages, which
contain a backported patch to resolve this issue.

OSVersionArchitecturePackageVersionFilename
RedHat4s390speex-devel< 1.0.4-4.el4_6.1speex-devel-1.0.4-4.el4_6.1.s390.rpm
RedHat5srcspeex< 1.0.5-4.el5_1.1speex-1.0.5-4.el5_1.1.src.rpm
RedHat5ppcspeex< 1.0.5-4.el5_1.1speex-1.0.5-4.el5_1.1.ppc.rpm
RedHat4x86_64speex< 1.0.4-4.el4_6.1speex-1.0.4-4.el4_6.1.x86_64.rpm
RedHat5i386speex< 1.0.5-4.el5_1.1speex-1.0.5-4.el5_1.1.i386.rpm
RedHat5ppc64speex-devel< 1.0.5-4.el5_1.1speex-devel-1.0.5-4.el5_1.1.ppc64.rpm
RedHat4srcspeex< 1.0.4-4.el4_6.1speex-1.0.4-4.el4_6.1.src.rpm
RedHat4ia64speex< 1.0.4-4.el4_6.1speex-1.0.4-4.el4_6.1.ia64.rpm
RedHat4s390xspeex< 1.0.4-4.el4_6.1speex-1.0.4-4.el4_6.1.s390x.rpm
RedHat5i386speex-devel< 1.0.5-4.el5_1.1speex-devel-1.0.5-4.el5_1.1.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	s390	speex-devel	< 1.0.4-4.el4_6.1	speex-devel-1.0.4-4.el4_6.1.s390.rpm
RedHat	5	src	speex	< 1.0.5-4.el5_1.1	speex-1.0.5-4.el5_1.1.src.rpm
RedHat	5	ppc	speex	< 1.0.5-4.el5_1.1	speex-1.0.5-4.el5_1.1.ppc.rpm
RedHat	4	x86_64	speex	< 1.0.4-4.el4_6.1	speex-1.0.4-4.el4_6.1.x86_64.rpm
RedHat	5	i386	speex	< 1.0.5-4.el5_1.1	speex-1.0.5-4.el5_1.1.i386.rpm
RedHat	5	ppc64	speex-devel	< 1.0.5-4.el5_1.1	speex-devel-1.0.5-4.el5_1.1.ppc64.rpm
RedHat	4	src	speex	< 1.0.4-4.el4_6.1	speex-1.0.4-4.el4_6.1.src.rpm
RedHat	4	ia64	speex	< 1.0.4-4.el4_6.1	speex-1.0.4-4.el4_6.1.ia64.rpm
RedHat	4	s390x	speex	< 1.0.4-4.el4_6.1	speex-1.0.4-4.el4_6.1.s390x.rpm
RedHat	5	i386	speex-devel	< 1.0.5-4.el5_1.1	speex-devel-1.0.5-4.el5_1.1.i386.rpm