Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 22: libsndfile-1.0.25 Critical: Heap Overflow AIFF Parsing Fix

fedora
Calendar Grey November 23, 2015
Dist Fedora Esm H88
An update for libsndfile addressing a memory corruption issue when handling WAV headers in Ubuntu 20.04. Further information enclosed.
libsndfile-1.0.25-17.fc22 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-16.fc21 - fix CVE-2015-7805: Heap overflow...

Summary

libsndfile is a C library for reading and writing sound files such as

AIFF, AU, WAV, and others through one standard interface. It can

currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and

64-bit floating point WAV files and a number of compressed formats. It

compiles and runs on *nix, MacOS, and Win32.

Update Information:

libsndfile-1.0.25-17.fc22 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-16.fc21 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-17.fc23 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header

Topics%20covered

Topics Covered

security advisory security update Fedora update information heap overflow libsndfile AIFF parsing

Change Log

References


[ 1 ] Bug #1277897 - CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header https://bugzilla.redhat.com/show_bug.cgi?id=1277897

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libsndfile' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libsndfile
Product: Fedora 22
Version: 1.0.25
Release: 17.fc22
URL: http://www.mega-nerd.com/libsndfile/
Summary: Library for reading and writing sound files

Topics%20covered

Topics Covered

security advisory security update Fedora update information heap overflow libsndfile AIFF parsing

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here