Low ELSA-2020-3922 1 CVE

Low: libsndfile security update (Oracle Linux 7)

Published Oct 6, 2020 · Updated Oct 6, 2020

Ecosystem: Oracle Linux

Summary

[1.0.25-12]
- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	libsndfile	0:1.0.25-12.el7
Oracle Linux · 7	libsndfile-devel	0:1.0.25-12.el7
Oracle Linux · 7	libsndfile-utils	0:1.0.25-12.el7

Vulnerabilities 1

Unscored —

CVE-2018-19662

An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that w…

libsndfile libsndfile libsndfile Debian Ubuntu Alpine

Nov 29, 2018