Security update for audiofile (moderate)

2018-10-2712:12:53

lists.opensuse.org

637

0.007 Low

EPSS

Percentile

79.8%

JSON

This update for audiofile fixes the following issues:

CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run
could occurred when running sfconvert leading to crashes or code
execution when handling untrusted soundfiles (bsc#1111586).

This update was imported from the SUSE:SLE-15:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0x86_64libaudiofile1-32bit< 0.3.6-lp150.2.3.1libaudiofile1-32bit-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0i586libaudiofile1< 0.3.6-lp150.2.3.1libaudiofile1-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap15.0i586audiofile< 0.3.6-lp150.2.3.1audiofile-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap15.0x86_64audiofile-debuginfo< 0.3.6-lp150.2.3.1audiofile-debuginfo-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0i586audiofile-doc< 0.3.6-lp150.2.3.1audiofile-doc-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap15.0i586audiofile-debugsource< 0.3.6-lp150.2.3.1audiofile-debugsource-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap15.0i586libaudiofile1-debuginfo< 0.3.6-lp150.2.3.1libaudiofile1-debuginfo-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap15.0x86_64audiofile-devel-32bit< 0.3.6-lp150.2.3.1audiofile-devel-32bit-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libaudiofile1-32bit-debuginfo< 0.3.6-lp150.2.3.1libaudiofile1-32bit-debuginfo-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64libaudiofile1-debuginfo< 0.3.6-lp150.2.3.1libaudiofile1-debuginfo-0.3.6-lp150.2.3.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	15.0	x86_64	libaudiofile1-32bit	< 0.3.6-lp150.2.3.1	libaudiofile1-32bit-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap	15.0	i586	libaudiofile1	< 0.3.6-lp150.2.3.1	libaudiofile1-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap	15.0	i586	audiofile	< 0.3.6-lp150.2.3.1	audiofile-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap	15.0	x86_64	audiofile-debuginfo	< 0.3.6-lp150.2.3.1	audiofile-debuginfo-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap	15.0	i586	audiofile-doc	< 0.3.6-lp150.2.3.1	audiofile-doc-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap	15.0	i586	audiofile-debugsource	< 0.3.6-lp150.2.3.1	audiofile-debugsource-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap	15.0	i586	libaudiofile1-debuginfo	< 0.3.6-lp150.2.3.1	libaudiofile1-debuginfo-0.3.6-lp150.2.3.1.i586.rpm
openSUSE Leap	15.0	x86_64	audiofile-devel-32bit	< 0.3.6-lp150.2.3.1	audiofile-devel-32bit-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libaudiofile1-32bit-debuginfo	< 0.3.6-lp150.2.3.1	libaudiofile1-32bit-debuginfo-0.3.6-lp150.2.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	libaudiofile1-debuginfo	< 0.3.6-lp150.2.3.1	libaudiofile1-debuginfo-0.3.6-lp150.2.3.1.x86_64.rpm