libsndfile-1.0.28-14.el8

エラータID: AXSA:2024-8260:02

Release date: 
Saturday, June 15, 2024 - 07:09
Subject: 
libsndfile-1.0.28-14.el8
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Asianux Server 8.10 Release Notes linked from the References section.

CVE-2022-33065
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libsndfile-1.0.28-14.el8.src.rpm
    MD5: 7f5cab09bb91a2c193cab2a30ba8350f
    SHA-256: 0d897a62c7ce129ddf9dd82a3a56ab8e8219ce97c411781519f54c2cebbe59a0
    Size: 1.18 MB

Asianux Server 8 for x86_64
  1. libsndfile-1.0.28-14.el8.i686.rpm
    MD5: 768861b3ad21af28727828a5f08bbd42
    SHA-256: 30e007cdb6cf5275a4466d59ca4973cf1d83d2ace53cb50f14e53f61bb2f08ce
    Size: 217.30 kB
  2. libsndfile-1.0.28-14.el8.x86_64.rpm
    MD5: 5add41d7a2dc8362ce442db9f667b2c0
    SHA-256: f8666279acecc3e3fc3acafcceec4f00a41659889a31a4239d15719bdaf2f443
    Size: 192.57 kB
  3. libsndfile-devel-1.0.28-14.el8.i686.rpm
    MD5: ca126f70fae4123b468bf9159ba4071a
    SHA-256: 2b45c89d65db4a24ffa2df5c7f9127b3f1ce173fa589141ce88f30b51f1568db
    Size: 152.97 kB
  4. libsndfile-devel-1.0.28-14.el8.x86_64.rpm
    MD5: b8c1faf3d7334518e1aee282e0cb939b
    SHA-256: c588f094a85afd4fc65f0eb2447235085293997b6571cf3b6366480636944f49
    Size: 152.95 kB
  5. libsndfile-utils-1.0.28-14.el8.x86_64.rpm
    MD5: 84f099957d8d83170a4f45f829914a91
    SHA-256: d590bcb4b82f61b96e7baeca5c9ebe98f7c10dd686a156e5cfb3c317b7247379
    Size: 80.55 kB