Affected: AlmaLinux:9: libsndfile, AlmaLinux:9: libsndfile-devel, AlmaLinux:9: libsndfile-utils

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

Affected: openEuler:24.03-LTS: libsndfile

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.(CVE-2022-33065)

libsndfile-devel-1.2.2-1.1 on GA media

Security update for libsndfile

Affected: Ubuntu:Pro:14.04:LTS: libsndfile, Ubuntu:Pro:16.04:LTS: libsndfile, Ubuntu:Pro:18.04:LTS: libsndfile, Ubuntu:20.04:LTS: libsndfile, Ubuntu:22.04:LTS: libsndfile

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

Ein Angreifer kann mehrere Schwachstellen in libsndfile ausnutzen, um beliebigen Code auszuführen, einen 'Denial of Service'-Zustand herbeizuführen oder einen nicht spezifizierten Angriff durchzuführen.