Paketname
libsndfile
Datum
2010-08-14
Advisory ID
MDVSA-2010:150
Betroffene Versionen
2009.0 x86_64 , MES5 i586 , 2010.0 x86_64 , 2010.0 i586 , 2009.1 i586 , 2009.0 i586 , CS4.0 i586 , 2008.0 x86_64 , CS4.0 x86_64 , 2008.0 i586 , 2009.1 x86_64 , MES5 x86_64

Problembeschreibung

A vulnerability has been discovered and corrected in libsndfile:

The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init,
(5) float32_init, and (6) sds_read_header functions in libsndfile
1.0.20 allow context-dependent attackers to cause a denial of service
(divide-by-zero error and application crash) via a crafted audio file
(CVE-2009-4835).

Packages for 2008.0 and 2009.0 are provided as of the Extended
Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149&products_id=490

The updated packages have been patched to correct this issue.

Aktualisierte Pakete

2009.0 x86_64

 fc887d2f087fb70702294dba17722575  2009.0/x86_64/lib64sndfile1-1.0.18-2.pre22.1.3mdv2009.0.x86_64.rpm
 6baee87b88f90e245f272e8408e13b52  2009.0/x86_64/lib64sndfile-devel-1.0.18-2.pre22.1.3mdv2009.0.x86_64.rpm
 f8e665f9d1d193b0d8370873d7835579  2009.0/x86_64/lib64sndfile-static-devel-1.0.18-2.pre22.1.3mdv2009.0.x86_64.rpm
 e6a01db2f7248dabc8284b786bb041d9  2009.0/x86_64/libsndfile-progs-1.0.18-2.pre22.1.3mdv2009.0.x86_64.rpm 
 76b4d09a0602f488c38eca666dd7e28b  2009.0/SRPMS/libsndfile-1.0.18-2.pre22.1.3mdv2009.0.src.rpm

MES5 i586

 929b5b97e3bdc675bd666f7e1ed4a60b  mes5/i586/libsndfile1-1.0.18-2.pre22.1.3mdvmes5.1.i586.rpm
 e61a30e23d0545bb8d394752bd1d190b  mes5/i586/libsndfile-devel-1.0.18-2.pre22.1.3mdvmes5.1.i586.rpm
 e8ea7611cafba70eac91c906398c5c38  mes5/i586/libsndfile-progs-1.0.18-2.pre22.1.3mdvmes5.1.i586.rpm
 5d059ce533df68af64e2210451fa216b  mes5/i586/libsndfile-static-devel-1.0.18-2.pre22.1.3mdvmes5.1.i586.rpm 
 a448b801cd00084c0f4885d83151f955  mes5/SRPMS/libsndfile-1.0.18-2.pre22.1.3mdvmes5.1.src.rpm

2010.0 x86_64

 89e5aa298807cb03527865ef9d33f3e2  2010.0/x86_64/lib64sndfile1-1.0.20-4.2mdv2010.0.x86_64.rpm
 db24021666e8f09882089977f079cb29  2010.0/x86_64/lib64sndfile-devel-1.0.20-4.2mdv2010.0.x86_64.rpm
 d42de597d70171cc2088e63cedead400  2010.0/x86_64/lib64sndfile-static-devel-1.0.20-4.2mdv2010.0.x86_64.rpm
 09914c069e9a80d87aebd0b54f0509e7  2010.0/x86_64/libsndfile-progs-1.0.20-4.2mdv2010.0.x86_64.rpm 
 67ceb70c109f022fa1d78c62d6565062  2010.0/SRPMS/libsndfile-1.0.20-4.2mdv2010.0.src.rpm

2010.0 i586

 e4487bf36980b6f5d816d8e952204a59  2010.0/i586/libsndfile1-1.0.20-4.2mdv2010.0.i586.rpm
 b7be27c71f023054b16ecb4acd8e4273  2010.0/i586/libsndfile-devel-1.0.20-4.2mdv2010.0.i586.rpm
 238e99e278c704ebcf498f72f1413fac  2010.0/i586/libsndfile-progs-1.0.20-4.2mdv2010.0.i586.rpm
 6c165c55ce51484e8e032e2d573e21a5  2010.0/i586/libsndfile-static-devel-1.0.20-4.2mdv2010.0.i586.rpm 
 67ceb70c109f022fa1d78c62d6565062  2010.0/SRPMS/libsndfile-1.0.20-4.2mdv2010.0.src.rpm

2009.1 i586

 ec8b2916fa28d7248d84d37211b3414e  2009.1/i586/libsndfile1-1.0.19-1.2mdv2009.1.i586.rpm
 b505744ecf8dc0aea55b15136314cb59  2009.1/i586/libsndfile-devel-1.0.19-1.2mdv2009.1.i586.rpm
 da9d2c8885a8f8e376209b658065bd1f  2009.1/i586/libsndfile-progs-1.0.19-1.2mdv2009.1.i586.rpm
 8fa4827a35d0b33f0c7c22ceb088335f  2009.1/i586/libsndfile-static-devel-1.0.19-1.2mdv2009.1.i586.rpm 
 e22990103ad877308ba7c037c0e04ba5  2009.1/SRPMS/libsndfile-1.0.19-1.2mdv2009.1.src.rpm

2009.0 i586

 56645881aeec875d661a072abe86c48b  2009.0/i586/libsndfile1-1.0.18-2.pre22.1.3mdv2009.0.i586.rpm
 08be4bc8a20fd892d43eddd352d2e5e5  2009.0/i586/libsndfile-devel-1.0.18-2.pre22.1.3mdv2009.0.i586.rpm
 c11393e67f6527e6ff6e4003cef263ec  2009.0/i586/libsndfile-progs-1.0.18-2.pre22.1.3mdv2009.0.i586.rpm
 3621901a1665cab19f5edcf276f49982  2009.0/i586/libsndfile-static-devel-1.0.18-2.pre22.1.3mdv2009.0.i586.rpm 
 76b4d09a0602f488c38eca666dd7e28b  2009.0/SRPMS/libsndfile-1.0.18-2.pre22.1.3mdv2009.0.src.rpm

CS4.0 i586

 bfe3861366791b73d04442bfaf3bb299  corporate/4.0/i586/libsndfile1-1.0.11-1.2.20060mlcs4.i586.rpm
 766afa1f2e9b1c5ddaaa87396e47eea5  corporate/4.0/i586/libsndfile1-devel-1.0.11-1.2.20060mlcs4.i586.rpm
 dc44890f00939116eb1dd49b8a39629b  corporate/4.0/i586/libsndfile1-static-devel-1.0.11-1.2.20060mlcs4.i586.rpm
 897269d1d95a3366e8d0aabaf73eaedb  corporate/4.0/i586/libsndfile-progs-1.0.11-1.2.20060mlcs4.i586.rpm 
 1e98b4c0787cf32285f2997aa0373123  corporate/4.0/SRPMS/libsndfile-1.0.11-1.2.20060mlcs4.src.rpm

2008.0 x86_64

 7d180d971b3da58cb75361372651f3e3  2008.0/x86_64/lib64sndfile1-1.0.18-0.pre20.0.2mdv2008.0.x86_64.rpm
 21afa308fd9532d4d9e6b3fd81544a7d  2008.0/x86_64/lib64sndfile-devel-1.0.18-0.pre20.0.2mdv2008.0.x86_64.rpm
 0b3ceb2670f62127f92884b3f5c2e134  2008.0/x86_64/lib64sndfile-static-devel-1.0.18-0.pre20.0.2mdv2008.0.x86_64.rpm
 c7bbba6a5f2b6d3540fb6b22400f5897  2008.0/x86_64/libsndfile-progs-1.0.18-0.pre20.0.2mdv2008.0.x86_64.rpm 
 f5500769668619ffe40b24db7fc4d3fd  2008.0/SRPMS/libsndfile-1.0.18-0.pre20.0.2mdv2008.0.src.rpm

CS4.0 x86_64

 3a2d9401bee2ff5bac422096fb8eda0e  corporate/4.0/x86_64/lib64sndfile1-1.0.11-1.2.20060mlcs4.x86_64.rpm
 5fbb7cd92538e1f407d9aefe3e4cc668  corporate/4.0/x86_64/lib64sndfile1-devel-1.0.11-1.2.20060mlcs4.x86_64.rpm
 21669c84457981cdff0f0be56680d37d  corporate/4.0/x86_64/lib64sndfile1-static-devel-1.0.11-1.2.20060mlcs4.x86_64.rpm
 7ba9b23784dbfa1ddaed83b8eb6c4863  corporate/4.0/x86_64/libsndfile-progs-1.0.11-1.2.20060mlcs4.x86_64.rpm 
 1e98b4c0787cf32285f2997aa0373123  corporate/4.0/SRPMS/libsndfile-1.0.11-1.2.20060mlcs4.src.rpm

2008.0 i586

 c93c7c7068d000b91eae61a8c09229c9  2008.0/i586/libsndfile1-1.0.18-0.pre20.0.2mdv2008.0.i586.rpm
 76dfe39ea12d4a7dfeadb2ec3a844cc4  2008.0/i586/libsndfile-devel-1.0.18-0.pre20.0.2mdv2008.0.i586.rpm
 acf42bb8cd11016a44cb395ace8e99c1  2008.0/i586/libsndfile-progs-1.0.18-0.pre20.0.2mdv2008.0.i586.rpm
 944dda961426efd66bd5a2546da06f44  2008.0/i586/libsndfile-static-devel-1.0.18-0.pre20.0.2mdv2008.0.i586.rpm 
 f5500769668619ffe40b24db7fc4d3fd  2008.0/SRPMS/libsndfile-1.0.18-0.pre20.0.2mdv2008.0.src.rpm

2009.1 x86_64

 24a7f6e860fd6490befaa82ce1c61b80  2009.1/x86_64/lib64sndfile1-1.0.19-1.2mdv2009.1.x86_64.rpm
 f5d77b1c1f83f546b6941c68acd29e4b  2009.1/x86_64/lib64sndfile-devel-1.0.19-1.2mdv2009.1.x86_64.rpm
 7b3d9f592ce56fb286847e20bdcb7160  2009.1/x86_64/lib64sndfile-static-devel-1.0.19-1.2mdv2009.1.x86_64.rpm
 3b48c5088456b87d8ece99a3000a90ff  2009.1/x86_64/libsndfile-progs-1.0.19-1.2mdv2009.1.x86_64.rpm 
 e22990103ad877308ba7c037c0e04ba5  2009.1/SRPMS/libsndfile-1.0.19-1.2mdv2009.1.src.rpm

MES5 x86_64

 b4e951fcfe36471ad9436946a666fb41  mes5/x86_64/lib64sndfile1-1.0.18-2.pre22.1.3mdvmes5.1.x86_64.rpm
 7e2d2be2dfcc45f208bd8cf45044840a  mes5/x86_64/lib64sndfile-devel-1.0.18-2.pre22.1.3mdvmes5.1.x86_64.rpm
 e6a17ad85bbc310829f397d356141907  mes5/x86_64/lib64sndfile-static-devel-1.0.18-2.pre22.1.3mdvmes5.1.x86_64.rpm
 9df33998c6f1e98bfd332017d63bf7f4  mes5/x86_64/libsndfile-progs-1.0.18-2.pre22.1.3mdvmes5.1.x86_64.rpm 
 a448b801cd00084c0f4885d83151f955  mes5/SRPMS/libsndfile-1.0.18-2.pre22.1.3mdvmes5.1.src.rpm

Referenzen