Security update for audiofile (moderate)

2018-11-1000:11:29

lists.opensuse.org

503

0.007 Low

EPSS

Percentile

79.8%

JSON

This update for audiofile fixes the following issues:

CVE-2018-17095: A heap-based buffer overflow in Expand3To4Module::run
could occurred when running sfconvert leading to crashes or code
execution when handling untrusted soundfiles (bsc#1111586).

This update was imported from the SUSE:SLE-12:Update update project.

OSVersionArchitecturePackageVersionFilename
openSUSE Leap42.3x86_64audiofile-devel-32bit< 0.3.6-13.3.1audiofile-devel-32bit-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap42.3x86_64libaudiofile1-debuginfo< 0.3.6-13.3.1libaudiofile1-debuginfo-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap42.3x86_64audiofile-doc< 0.3.6-13.3.1audiofile-doc-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap42.3i586audiofile-debugsource< 0.3.6-13.3.1audiofile-debugsource-0.3.6-13.3.1.i586.rpm
openSUSE Leap42.3i586audiofile-debuginfo< 0.3.6-13.3.1audiofile-debuginfo-0.3.6-13.3.1.i586.rpm
openSUSE Leap42.3x86_64audiofile-devel< 0.3.6-13.3.1audiofile-devel-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap42.3x86_64libaudiofile1-debuginfo-32bit< 0.3.6-13.3.1libaudiofile1-debuginfo-32bit-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap42.3i586audiofile< 0.3.6-13.3.1audiofile-0.3.6-13.3.1.i586.rpm
openSUSE Leap42.3x86_64audiofile< 0.3.6-13.3.1audiofile-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap42.3i586audiofile-devel< 0.3.6-13.3.1audiofile-devel-0.3.6-13.3.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	42.3	x86_64	audiofile-devel-32bit	< 0.3.6-13.3.1	audiofile-devel-32bit-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libaudiofile1-debuginfo	< 0.3.6-13.3.1	libaudiofile1-debuginfo-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	audiofile-doc	< 0.3.6-13.3.1	audiofile-doc-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	audiofile-debugsource	< 0.3.6-13.3.1	audiofile-debugsource-0.3.6-13.3.1.i586.rpm
openSUSE Leap	42.3	i586	audiofile-debuginfo	< 0.3.6-13.3.1	audiofile-debuginfo-0.3.6-13.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	audiofile-devel	< 0.3.6-13.3.1	audiofile-devel-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap	42.3	x86_64	libaudiofile1-debuginfo-32bit	< 0.3.6-13.3.1	libaudiofile1-debuginfo-32bit-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	audiofile	< 0.3.6-13.3.1	audiofile-0.3.6-13.3.1.i586.rpm
openSUSE Leap	42.3	x86_64	audiofile	< 0.3.6-13.3.1	audiofile-0.3.6-13.3.1.x86_64.rpm
openSUSE Leap	42.3	i586	audiofile-devel	< 0.3.6-13.3.1	audiofile-devel-0.3.6-13.3.1.i586.rpm