Ubuntu 17.04: USN-3306-1 Critical: Libsndfile Denial Of Service

ubuntu

June 1, 2017

Several security issues were fixed in libsndfile.

Summary

Several security issues were fixed in libsndfile.

Software Description:

- libsndfile: Library for reading/writing audio files

Details:

Agostino Sarubbo and Jakub Jirasek discovered that libsndfile incorrectly

handled certain malformed files. A remote attacker could use this issue to

cause libsndfile to crash, resulting in a denial of service, or possibly

execute arbitrary code.

Topics Covered

security advisory denial of service security issue critical Ubuntu libsndfile

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  libsndfile1                     1.0.27-1ubuntu0.1

Ubuntu 16.10:
  libsndfile1                     1.0.25-10ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  libsndfile1                     1.0.25-10ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  libsndfile1                     1.0.25-7ubuntu2.2

After a standard system update you need to restart your session to make all
the necessary changes.