Medium ALAS2023-2025-902 1 CVE

Moderate: libsndfile security update (Amazon Linux 2023)

Published Mar 13, 2025 · Updated Mar 26, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2024-50612: libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

Fixed packages 6

Release	Package	Fixed in
Amazon Linux · 2023	libsndfile	0:1.2.2-3.amzn2023.0.3
Amazon Linux · 2023	libsndfile-debuginfo	0:1.2.2-3.amzn2023.0.3
Amazon Linux · 2023	libsndfile-debugsource	0:1.2.2-3.amzn2023.0.3
Amazon Linux · 2023	libsndfile-devel	0:1.2.2-3.amzn2023.0.3
Amazon Linux · 2023	libsndfile-utils	0:1.2.2-3.amzn2023.0.3
Amazon Linux · 2023	libsndfile-utils-debuginfo	0:1.2.2-3.amzn2023.0.3

Vulnerabilities 1

Medium 5.3

CVE-2024-50612

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

libsndfile libsndfile libsndfile libsndfile Debian Ubuntu Azure Linux Alpine

Oct 27, 2024

References

web
https://alas.aws.amazon.com/cve/html/CVE-2024-50612.html