Security News

Cybersecurity news aggregator

🔓
HIGH Vulnerabilities Ubuntu Security

USN-8612-1: Roc Toolkit vulnerability

A high-severity vulnerability (CVE-2026-29022, CVSS 7.3) in Roc Toolkit allows remote code execution or denial of service via a specially crafted WAV file containing a malformed "smpl" chunk. The NVD lists affected versions as mackron dr_libs up to and including version 0.14.4. The Ubuntu security notice provides a fixed package version of libroc0.4 version 0.4.0+dfsg-5ubuntu3.1 for Ubuntu 26.04 LTS.
Read Full Article →

Ubuntu Security Notices USN-8612-1 USN-8612-1: Roc Toolkit vulnerability Publication date 27 July 2026 Overview Roc Toolkit could be made to crash or run programs as your login if it opened a specially crafted file. Releases 26.04 LTS Open side navigation Close side navigation Packages Details Update instructions References Packages roc-toolkit - real-time audio streaming over the network Details It was discovered that Roc Toolkit incorrectly handled WAV files with a malformed "smpl" chunk. An attacker could use this issue to cause Roc Toolkit to crash, resulting in a denial of service, or possibly execute arbitrary code. It was discovered that Roc Toolkit incorrectly handled WAV files with a malformed "smpl" chunk. An attacker could use this issue to cause Roc Toolkit to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions In general, a standard system update will make all the necessary changes. Learn more about how to get the fixes. The problem can be corrected by updating your system to the following package versions: Ubuntu Release Package Version 26.04 LTS resolute libroc0.4 – 0.4.0+dfsg-5ubuntu3.1 Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. Get Ubuntu Pro References CVE-2026-29022 CVE-2026-29022

Share this article