|
|
Subscribe / Log in / New account

Ubuntu alert USN-6471-1 (libsndfile)

From:  Fabian Toepfer <fabian.toepfer@canonical.com>
To:  ubuntu-security-announce@lists.ubuntu.com
Subject:  [USN-6471-1] libsndfile vulnerability
Date:  Thu, 02 Nov 2023 21:43:08 +0100
Message-ID:  <43d67063-3a4d-44e1-a952-2fe1979d720e@canonical.com>

========================================================================== Ubuntu Security Notice USN-6471-1 November 02, 2023 libsndfile vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 23.10 - Ubuntu 23.04 - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) - Ubuntu 14.04 LTS (Available with Ubuntu Pro) Summary: libsndfile could be made to crash if it received specially crafted input. Software Description: - libsndfile: Library for reading/writing audio files Details: It was discovered that libsndfile contained multiple arithmetic overflows. If a user or automated system were tricked into processing a specially crafted audio file, an attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 23.10:   libsndfile1                     1.2.2-1ubuntu0.23.10.1   sndfile-programs                1.2.2-1ubuntu0.23.10.1 Ubuntu 23.04:   libsndfile1                     1.2.0-1ubuntu0.1   sndfile-programs                1.2.0-1ubuntu0.1 Ubuntu 22.04 LTS:   libsndfile1                     1.0.31-2ubuntu0.1   sndfile-programs                1.0.31-2ubuntu0.1 Ubuntu 20.04 LTS:   libsndfile1                     1.0.28-7ubuntu0.2   sndfile-programs                1.0.28-7ubuntu0.2 Ubuntu 18.04 LTS (Available with Ubuntu Pro):   libsndfile1                     1.0.28-4ubuntu0.18.04.2+esm1   sndfile-programs                1.0.28-4ubuntu0.18.04.2+esm1 Ubuntu 16.04 LTS (Available with Ubuntu Pro):   libsndfile1                     1.0.25-10ubuntu0.16.04.3+esm3   sndfile-programs                1.0.25-10ubuntu0.16.04.3+esm3 Ubuntu 14.04 LTS (Available with Ubuntu Pro):   libsndfile1                     1.0.25-7ubuntu2.2+esm3   sndfile-programs                1.0.25-7ubuntu2.2+esm3 In general, a standard system update will make all the necessary changes. References:   https://ubuntu.com/security/notices/USN-6471-1   CVE-2022-33065 Package Information: https://launchpad.net/ubuntu/+source/libsndfile/1.2.2-1ub...   https://launchpad.net/ubuntu/+source/libsndfile/1.2.0-1ub... https://launchpad.net/ubuntu/+source/libsndfile/1.0.31-2u... https://launchpad.net/ubuntu/+source/libsndfile/1.0.28-7u...


to post comments


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds