Test ID:	1.3.6.1.4.1.25623.1.0.66181
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:1561
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:1561.;;The libvorbis packages contain runtime libraries for use in programs that;support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and;royalty-free, general-purpose compressed audio format.;;Multiple flaws were found in the libvorbis library. A specially-crafted Ogg;Vorbis media format file (Ogg) could cause an application using libvorbis;to crash or, possibly, execute arbitrary code when opened. (CVE-2009-3379);;Users of libvorbis should upgrade to these updated packages, which contain;backported patches to correct these issues. The desktop must be restarted;(log out, then log back in) for this update to take effect.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1561. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. Multiple flaws were found in the libvorbis library. A specially-crafted Ogg Vorbis media format file (Ogg) could cause an application using libvorbis to crash or, possibly, execute arbitrary code when opened. (CVE-2009-3379) Users of libvorbis should upgrade to these updated packages, which contain backported patches to correct these issues. The desktop must be restarted (log out, then log back in) for this update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3379 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 http://www.redhat.com/support/errata/RHSA-2009-1561.html http://secunia.com/advisories/37306 http://secunia.com/advisories/37340 http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 http://www.ubuntu.com/usn/USN-861-1 http://www.vupen.com/english/advisories/2009/3334
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.