Medium ELSA-2024-11192 1 CVE

Moderate: libsndfile security update (Oracle Linux 8)

Published Dec 17, 2024 · Updated Dec 17, 2024

Ecosystem: Oracle Linux

Summary

[1.0.28-16]
- fix prerequisit patch (#RHEL-65093)

[1.0.28-15]
- fix crash in ogg vorbis (#RHEL-65093) (CVE-2024-50612)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libsndfile	0:1.0.28-16.el8_10
Oracle Linux · 8	libsndfile-devel	0:1.0.28-16.el8_10
Oracle Linux · 8	libsndfile-utils	0:1.0.28-16.el8_10

Vulnerabilities 1

Medium 5.3

CVE-2024-50612

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.

libsndfile libsndfile libsndfile libsndfile Debian Ubuntu Azure Linux Alpine

Oct 27, 2024