UbuntuUpdates.org

Package "sndfile-programs"

Name: sndfile-programs

Description:

Sample programs that use libsndfile

Latest version: 1.0.31-1ubuntu1.1
Release: hirsute (21.04)
Level: security
Repository: universe
Head package: libsndfile
Homepage: http://www.mega-nerd.com/libsndfile/

Links


Download "sndfile-programs"


Other versions of "sndfile-programs" in Hirsute

Repository Area Version
base universe 1.0.31-1ubuntu1
updates universe 1.0.31-1ubuntu1.1

Changelog

Version: 1.0.31-1ubuntu1.1 2021-07-29 03:06:29 UTC

  libsndfile (1.0.31-1ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in msadpcm_decode_block allows
    arbitrary code execution via crafted WAV file.
    - debian/patches/CVE-2021-3246.patch: upstream patch to src/ms_adpcm.c
      to validate samples per block
    - CVE-2021-3246

 -- Alex Murray <email address hidden> Tue, 27 Jul 2021 16:22:54 +0930

CVE-2021-3246 A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code via a crafted WAV file.



About   -   Send Feedback to @ubuntu_updates