Ubuntu: 4013-1 Moderate: Libsndfile DoS and Code Execution Risks

ubuntu

June 10, 2019

Several security issues were fixed in libsndfile.

Summary

Several security issues were fixed in libsndfile.

Software Description:

- libsndfile: Library for reading/writing audio files

Details:

It was discovered that libsndfile incorrectly handled certain malformed

files. A remote attacker could use this issue to cause libsndfile to crash,

resulting in a denial of service, or possibly execute arbitrary code.

Topics Covered

security advisory update DoS Ubuntu remote execution flaw libsndfile

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.10:
  libsndfile1                     1.0.28-4ubuntu0.18.10.1

Ubuntu 18.04 LTS:
  libsndfile1                     1.0.28-4ubuntu0.18.04.1

Ubuntu 16.04 LTS:
  libsndfile1                     1.0.25-10ubuntu0.16.04.2

After a standard system update you need to restart your session to make all
the necessary changes.