FEDORA-2017-a2a4f8d8a1 — security update for libsndfile

stable

libsndfile-1.0.28-1.fc26

FEDORA-2017-a2a4f8d8a1 created by mhlavink 7 years ago for Fedora 26

updated to 1.0.28
fixes possible buffer overflow when parsing crafted ID3 tags (#1440758, CVE-2017-7586)
fixes possible buffer overflow when parsing crafted flac file (#1440756, CVE-2017-7585)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-a2a4f8d8a1

This update has been submitted for testing by mhlavink.

7 years ago

This update has been pushed to testing.

7 years ago

besser82 commented & provided feedback 7 years ago

karma

Works great! LGTM! =)

cserpentis commented & provided feedback 7 years ago

karma

works for me in a VM

amcg commented & provided feedback 7 years ago

karma

no issues

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

libsndfile-1.0.28-1.fc26

BZ#1440756 CVE-2017-7585 libsndfile: Stack-based buffer overflow in flac_buffer_copy()

BZ#1440758 CVE-2017-7586 libsndfile: Error in header_read() causing stack-based buffer overflow

BZ#1440760 CVE-2017-7585 CVE-2017-7586 libsndfile: various flaws [fedora-all]

libsndfile-1.0.28-1.fc26

Automated Test Results

None