Summary
[1.0.31-8.2]
- fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | libsndfile | 0:1.0.31-8.el9_5.2 |
| Oracle Linux · 9 | libsndfile-devel | 0:1.0.31-8.el9_5.2 |
| Oracle Linux · 9 | libsndfile-utils | 0:1.0.31-8.el9_5.2 |
Vulnerabilities 1
-
Medium 5.3
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.