| |||||||||||||||||||
Ubuntu alert USN-1174-1 (libsndfile)
========================================================================== Ubuntu Security Notice USN-1174-1 July 25, 2011 libsndfile vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 11.04 - Ubuntu 10.10 - Ubuntu 10.04 LTS Summary: An application using libsndfile could be made to crash or possibly run programs as your login if it opened a specially crafted file. Software Description: - libsndfile: Library for reading/writing audio files Details: Hossein Lotfi discovered that libsndfile did not properly verify the header length and number of channels for PARIS Audio Format (PAF) audio files. An attacker could exploit this to cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.04: libsndfile1 1.0.23-1ubuntu0.1 Ubuntu 10.10: libsndfile1 1.0.21-2ubuntu0.10.10.1 Ubuntu 10.04 LTS: libsndfile1 1.0.21-2ubuntu0.10.04.1 After a standard system update you need to restart your login session to make all the necessary changes. References: http://www.ubuntu.com/usn/usn-1174-1 CVE-2011-2696 Package Information: https://launchpad.net/ubuntu/+source/libsndfile/1.0.23-1u... https://launchpad.net/ubuntu/+source/libsndfile/1.0.21-2u... https://launchpad.net/ubuntu/+source/libsndfile/1.0.21-2u... -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security... (Log in to post comments)
|
|||||||||||||||||||