Ubuntu 15.10: USN-2787-1 Critical Security: Audiofile DoS Vulnerability

ubuntu

October 28, 2015

audiofile could be made to crash or run programs as your login if it opened a specially crafted file.

Summary

audiofile could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- audiofile: Open-source version of the SGI audiofile library

Details:

Fabrizio Gennari discovered that audiofile incorrectly handled changing

both the sample format and the number of channels. If a user or automated

system were tricked into processing a specially crafted file, audiofile

could be made to crash, leading to a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service software update Ubuntu audiofile

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  libaudiofile1                   0.3.6-2ubuntu0.15.10.1

Ubuntu 15.04:
  libaudiofile1                   0.3.6-2ubuntu0.15.04.1

Ubuntu 14.04 LTS:
  libaudiofile1                   0.3.6-2ubuntu0.14.04.1

Ubuntu 12.04 LTS:
  libaudiofile1                   0.3.3-2ubuntu0.1

In general, a standard system update will make all the necessary changes.