Advisories » MGASA-2019-0300

Updated libsndfile packages fix security vulnerability

Publication date: 23 Oct 2019
Modification date: 23 Oct 2019
Type: security
Affected Mageia releases : 7
CVE: CVE-2019-3832

Description

Updated libsndfile package fixes security vulnerability:

It was discovered that libsndfile incorrectly handled certain malformed
files. A remote attacker could use this issue to cause libsndfile to crash,
resulting in a denial of service, or possibly execute arbitrary code
(CVE-2019-3832).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=25275
• https://usn.ubuntu.com/4013-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3832

SRPMS

7/core

• libsndfile-1.0.28-8.1.mga7