Alerts This Week
Warning Icon 1 1,123
Alerts This Week
Warning Icon 1 1,123

Fedora 40: FEDORA-2024-3ae3a47901 critical: libsndfile DoS

fedora
Calendar Grey November 27, 2024
Dist Fedora Esm H88
Correction implemented for libsndfile instability in Fedora 40 resolves CVE-2024-50612 weaknesses concerning ogg vorbis.
fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)

Summary

libsndfile is a C library for reading and writing sound files such as

AIFF, AU, WAV, and others through one standard interface. It can

currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and

64-bit floating point WAV files and a number of compressed formats. It

compiles and runs on *nix, MacOS, and Win32.

Update Information:

fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612)

Topics%20covered

Topics Covered

security advisory Fedora DoS crash fix sound library ogg vorbis

Change Log

* Mon Nov 18 2024 Michal Hlavinka - 1.2.2-4 - fix crash in in ogg vorbis (rhbz#2322326) (CVE-2024-50612) * Thu Jan 25 2024 Fedora Release Engineering - 1.2.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild

References


[ 1 ] Bug #2322326 - CVE-2024-50612 libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2322326

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-3ae3a47901' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: libsndfile
Product: Fedora 40
Version: 1.2.2
Release: 4.fc40
URL: http://libsndfile.github.io/libsndfile/
Summary: Library for reading and writing sound files

Topics%20covered

Topics Covered

security advisory Fedora DoS crash fix sound library ogg vorbis

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here