UbuntuUpdates.org

Package "libsndfile1-dev"

Name: libsndfile1-dev

Description:

Development files for libsndfile; a library for reading/writing audio files
Latest version: 1.0.31-2ubuntu0.2
Release: jammy (22.04)
Level: security
Repository: main
Head package: libsndfile
Homepage: http://www.mega-nerd.com/libsndfile/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libsndfile1-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libsndfile1-dev" in Jammy

Repository Area Version
base main 1.0.31-2build1
updates main 1.0.31-2ubuntu0.2

Changelog

Version: 1.0.31-2ubuntu0.2 2025-02-18 22:07:15 UTC

  libsndfile (1.0.31-2ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/CVE-2021-4156.patch: addresses improper buffer reusing
    - CVE-2021-4156
  * SECURITY UPDATE: out-of-bounds read
    - debian/patches/CVE-2024-50612.patch: adds better error checking for
      vorbis.
    - CVE-2024-50612

 -- Ian Constantin <email address hidden> Wed, 12 Feb 2025 23:51:50 +0200
Source diff to previous version
CVE-2021-4156 An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricki
CVE-2024-50612 libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

Version: 1.0.31-2ubuntu0.1 2023-11-04 23:07:11 UTC

  libsndfile (1.0.31-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: integer overflow vulnerability
    - debian/patches/CVE-2022-33065/CVE-2022-33065-*.patch: fix various
      numeric overflow vulnerabilities.
    - CVE-2022-33065

 -- Fabian Toepfer <email address hidden> Thu, 02 Nov 2023 16:42:46 +0100
CVE-2022-33065 Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile,


About   -   Send Feedback to @ubuntu_updates