libsndfile-1.0.28-16.el8_10

エラータID: AXSA:2024-9429:03

Release date: 
Thursday, December 19, 2024 - 22:40
Subject: 
libsndfile-1.0.28-16.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-50612
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. libsndfile-1.0.28-16.el8_10.src.rpm
    MD5: 02d053b58d6ae59ca46caa0843b67d8f
    SHA-256: 3e01a1277a02821ce3c1cea6f3f6a97d694c83635531b96cc4be479a1f57d762
    Size: 1.18 MB

Asianux Server 8 for x86_64
  1. libsndfile-1.0.28-16.el8_10.i686.rpm
    MD5: 54bb4d9bb8f3b6e962f67c8109661302
    SHA-256: 4b0d433e27ed34d255687aca98194d67ecc39655caba6535bfc83e5c5cb75464
    Size: 217.76 kB
  2. libsndfile-1.0.28-16.el8_10.x86_64.rpm
    MD5: 11599c870d24c6096bb1d5541a6f69fe
    SHA-256: 049fd8502d23cc61a56391838b1644c7b27c4523821668137e3da1c35eab0849
    Size: 192.94 kB
  3. libsndfile-devel-1.0.28-16.el8_10.i686.rpm
    MD5: ce132a07542415e9ed3228f29dfbb694
    SHA-256: e023fbd1aa26675bb47b261982f041da00b3d8f177f133df84dbff72365aae1c
    Size: 153.31 kB
  4. libsndfile-devel-1.0.28-16.el8_10.x86_64.rpm
    MD5: e401776f6fc8dfa4fcd57b83c29c7e5c
    SHA-256: e3b8f0eb8639dcbaa8ae1b6b609196a44b9d131a7e0d4b867d9d48f0574a4bc2
    Size: 153.29 kB
  5. libsndfile-utils-1.0.28-16.el8_10.x86_64.rpm
    MD5: 91b84354cd9c392927fb2c70fac036b2
    SHA-256: 8f77210c970c5c78b27f1a45393a02f393664f8a74d2eb7d2a009f689e43c342
    Size: 80.87 kB