Ubuntu
libsndfile package

libsndfile 1.0.28-7ubuntu0.1 source package in Ubuntu

Changelog

libsndfile (1.0.28-7ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in msadpcm_decode_block allows
    arbitrary code execution via crafted WAV file.
    - debian/patches/CVE-2021-3246.patch: upstream patch to src/ms_adpcm.c
      to validate samples per block
    - CVE-2021-3246

 -- Alex Murray <email address hidden>  Wed, 28 Jul 2021 10:22:09 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Focal
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
devel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libsndfile_1.0.28.orig.tar.gz 1.1 MiB 1ff33929f042fa333aed1e8923aa628c3ee9e1eb85512686c55092d1e5a9dfa9
libsndfile_1.0.28-7ubuntu0.1.debian.tar.xz 16.8 KiB 2d5986012e8c58f01a79dccc777fd59d1967c17676d0c270cc17500bf6264f40
libsndfile_1.0.28-7ubuntu0.1.dsc 2.0 KiB eb5847da583816db1c69dbe7279c41c052d2950b08df1376cce074073870455f

View changes file

Binary packages built by this source

libsndfile1: Library for reading/writing audio files

 libsndfile is a library of C routines for reading and writing files containing
 sampled audio data.
 .
 Various versions of WAV (integer, floating point, GSM, and compressed formats);
 Microsoft PCM, A-law and u-law formats; AIFF, AIFC and RIFX; various AU/SND
 formats (Sun/NeXT, Dec AU, G721 and G723 ADPCM); RAW header-less PCM files;
 Amiga IFF/8SVX/16SV PCM files; Ensoniq PARIS (.PAF); Apple's Core Audio Format
 (CAF) and others.

libsndfile1-dbgsym: debug symbols for libsndfile1
libsndfile1-dev: Development files for libsndfile; a library for reading/writing audio files

 libsndfile is a library of C routines for reading and writing files containing
 sampled audio data.
 .
 This is the development version of libsndfile. You will need this only if you
 intend to compile programs that use this library.

sndfile-programs: Sample programs that use libsndfile

 This package contains simple programs which use libsndfile for operating on
 sound files.
 .
 Programs include:
   - sndfile-cmp : compare the audio data of two files
   - sndfile-concat : concatenate two or more files
   - sndfile-convert : convert between sound file formats
   - sndfile-info : print information about files
   - sndfile-metadata-get/set : get and set file metadata
   - sndfile-play : play a sound file

sndfile-programs-dbgsym: debug symbols for sndfile-programs