Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Fedora 23: 2015-11-13 Moderate: libsndfile Heap Overflow Issue

fedora
Calendar Grey November 13, 2015
Scroller Fedora
Debian Security Notice regarding alsa-lib addressing memory corruption vulnerability in Ogg Vorbis file handling.
libsndfile-1.0.25-17.fc22 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-16.fc21 - fix CVE-2015-7805: Heap overflow...

Summary

libsndfile is a C library for reading and writing sound files such as

AIFF, AU, WAV, and others through one standard interface. It can

currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and

64-bit floating point WAV files and a number of compressed formats. It

compiles and runs on *nix, MacOS, and Win32.

Update Information:

libsndfile-1.0.25-17.fc22 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-16.fc21 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header libsndfile-1.0.25-17.fc23 - fix CVE-2015-7805: Heap overflow vulnerability when parsing specially crafted AIFF header

Change Log

References


[ 1 ] Bug #1277897 - CVE-2015-7805 libsndfile: Heap overflow vulnerability when parsing specially crafted AIFF header https://bugzilla.redhat.com/show_bug.cgi?id=1277897

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update libsndfile' at the command line. For more information, refer to "Managing Software with yum", available at .

Name: libsndfile
Product: Fedora 23
Version: 1.0.25
Release: 17.fc23
Summary: Library for reading and writing sound files

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.