libsndfile-1.0.28-16.el8_10
エラータID: AXSA:2024-9429:03
Release date:
Thursday, December 19, 2024 - 22:40
Subject:
libsndfile-1.0.28-16.el8_10
Affected Channels:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.
Security Fix(es):
* libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2024-50612
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
Solution:
Update packages.
CVEs:
CVE-2024-50612
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
Additional Info:
N/A
Download:
SRPMS
- libsndfile-1.0.28-16.el8_10.src.rpm
MD5: 02d053b58d6ae59ca46caa0843b67d8f
SHA-256: 3e01a1277a02821ce3c1cea6f3f6a97d694c83635531b96cc4be479a1f57d762
Size: 1.18 MB
Asianux Server 8 for x86_64
- libsndfile-1.0.28-16.el8_10.i686.rpm
MD5: 54bb4d9bb8f3b6e962f67c8109661302
SHA-256: 4b0d433e27ed34d255687aca98194d67ecc39655caba6535bfc83e5c5cb75464
Size: 217.76 kB - libsndfile-1.0.28-16.el8_10.x86_64.rpm
MD5: 11599c870d24c6096bb1d5541a6f69fe
SHA-256: 049fd8502d23cc61a56391838b1644c7b27c4523821668137e3da1c35eab0849
Size: 192.94 kB - libsndfile-devel-1.0.28-16.el8_10.i686.rpm
MD5: ce132a07542415e9ed3228f29dfbb694
SHA-256: e023fbd1aa26675bb47b261982f041da00b3d8f177f133df84dbff72365aae1c
Size: 153.31 kB - libsndfile-devel-1.0.28-16.el8_10.x86_64.rpm
MD5: e401776f6fc8dfa4fcd57b83c29c7e5c
SHA-256: e3b8f0eb8639dcbaa8ae1b6b609196a44b9d131a7e0d4b867d9d48f0574a4bc2
Size: 153.29 kB - libsndfile-utils-1.0.28-16.el8_10.x86_64.rpm
MD5: 91b84354cd9c392927fb2c70fac036b2
SHA-256: 8f77210c970c5c78b27f1a45393a02f393664f8a74d2eb7d2a009f689e43c342
Size: 80.87 kB