Multiple vulnerabilities have been found in libsndfile, the worst of which could result in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.1.0 | >= 1.1.0 |
libsndfile is a C library for reading and writing files containing sampled sound.
Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.1.0"
Multiple vulnerabilities have been found in libsndfile, the worst of which could result in a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.29_pre2_p20191024 | >= 1.0.29_pre2_p20191024 |
libsndfile is a C library for reading and writing files containing sampled sound.
Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.29_pre2_p20191024"
Multiple vulnerabilities have been found in libsndfile, the worst of which might allow remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.28-r4 | >= 1.0.28-r4 |
libsndfile is a C library for reading and writing files containing sampled sound.
Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details.
A remote attacker, by enticing a user to open a specially crafted file, could cause a Denial of Service condition or have other unspecified impacts.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.28-r4"
Multiple vulnerabilities have been found in libsndfile, the worst of which might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.28 | >= 1.0.28 |
libsndfile is a C library for reading and writing files containing sampled sound.
Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.28"
Multiple vulnerabilities have been found in libsndfile, the worst of which might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.26 | >= 1.0.26 |
libsndfile is a C library for reading and writing files containing sampled sound.
Multiple vulnerabilities have been discovered in libsndfile. Please review the CVE identifiers referenced below for details.
A remote attacker could entice a user to open a specially crafted file, possibly resulting in the execution of arbitrary code with the privileges of the process, or cause a Denial of Service condition.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.26"
An integer overflow in libsndfile might allow remote attackers to execute arbitrary code or cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.25 | >= 1.0.25 |
Libsndfile is a C library for reading and writing files containing sampled sound through one standard library interface.
An integer overflow flaw has been discovered in Libsndfile.
A remote attacker could entice a user to open a specially crafted PAF file using libsndfile, possibly resulting in execution of arbitrary code with the privileges of the process, or a Denial of Service condition.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.25"
Packages which depend on this library may need to be recompiled. Tools such as revdep-rebuild may assist in identifying some of these packages.
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since September 12, 2011. It is likely that your system is already no longer affected by this issue.
Multiple heap-based buffer overflow vulnerabilities in libsndfile might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.20 | >= 1.0.20 |
libsndfile is a C library for reading and writing files containing sampled sound.
The following vulnerabilities have been found in libsndfile:
A remote attacker could entice a user to open a specially crafted AIFF or VOC file in a program using libsndfile, possibly resulting in the execution of arbitrary code with the privileges of the user running the application.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.20"
A buffer overflow vulnerability in libsndfile might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.19 | >= 1.0.19 |
libsndfile is a C library for reading and writing files containing sampled sound.
Alin Rad Pop from Secunia Research reported an integer overflow when processing CAF description chunks, leading to a heap-based buffer overflow.
A remote attacker could entice a user to open a specially crafted CAF file, resulting in the remote execution of arbitrary code with the privileges of the user running the application.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.19"
A buffer overflow vulnerability has been discovered in libsndfile.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| media-libs/libsndfile | * | < 1.0.17-r1 | >= 1.0.17-r1 |
libsndfile is a library for reading and writing various formats of audio files including WAV and FLAC.
Robert Buchholz of the Gentoo Security team discovered that the flac_buffer_copy() function does not correctly handle FLAC streams with variable block sizes which leads to a heap-based buffer overflow (CVE-2007-4974).
A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted FLAC file or network stream with an application using libsndfile. This might lead to the execution of arbitrary code with privileges of the user playing the file.
There is no known workaround at this time.
All libsndfile users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=media-libs/libsndfile-1.0.17-r1"