Advisories » MGASA-2019-0182

Updated libsndfile packages fix security vulnerability

Publication date: 19 May 2019
Modification date: 19 May 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-19758

Description

A heap-based buffer over-read at wav.c in wav_write_header that could be
used for a denial of service attack (CVE-2018-19758).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24752
• http://lists.suse.com/pipermail/sle-security-updates/2019-April/005286.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19758

SRPMS

6/core

• libsndfile-1.0.28-3.4.mga6