libsndfile 1.0.31-1ubuntu1.1 source package in Ubuntu


libsndfile (1.0.31-1ubuntu1.1) hirsute-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in msadpcm_decode_block allows
    arbitrary code execution via crafted WAV file.
    - debian/patches/CVE-2021-3246.patch: upstream patch to src/ms_adpcm.c
      to validate samples per block
    - CVE-2021-3246

 -- Alex Murray <email address hidden>  Tue, 27 Jul 2021 16:22:54 +0930

Upload details

Uploaded by:
Alex Murray
Uploaded to:
Original maintainer:
Ubuntu Developers
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Hirsute updates main libs
Hirsute security main libs


File Size SHA-256 Checksum
libsndfile_1.0.31.orig.tar.gz 647.1 KiB 8cdee0acb06bb0a3c1a6ca524575643df8b1f3a55a0893b4dd9f829d08263785
libsndfile_1.0.31-1ubuntu1.1.debian.tar.xz 14.3 KiB dc7281fd324ae091373be457499a4740d2df6d5f3e2c4cacc30ee7c5837fde7a
libsndfile_1.0.31-1ubuntu1.1.dsc 2.1 KiB c7a6ffa8dae5f2411ab2906484e59a52182f551ae6fc3aef07cf4eaa8367067e

View changes file

Binary packages built by this source

libsndfile1: Library for reading/writing audio files

 libsndfile is a library of C routines for reading and writing files containing
 sampled audio data.
 Various versions of WAV (integer, floating point, GSM, and compressed formats);
 Microsoft PCM, A-law and u-law formats; AIFF, AIFC and RIFX; various AU/SND
 formats (Sun/NeXT, Dec AU, G721 and G723 ADPCM); RAW header-less PCM files;
 Amiga IFF/8SVX/16SV PCM files; Ensoniq PARIS (.PAF); Apple's Core Audio Format
 (CAF) and others.

libsndfile1-dbgsym: debug symbols for libsndfile1
libsndfile1-dev: Development files for libsndfile; a library for reading/writing audio files

 libsndfile is a library of C routines for reading and writing files containing
 sampled audio data.
 This is the development version of libsndfile. You will need this only if you
 intend to compile programs that use this library.

libsndfile1-dev-dbgsym: debug symbols for libsndfile1-dev
sndfile-programs: Sample programs that use libsndfile

 This package contains simple programs which use libsndfile for operating on
 sound files.
 Programs include:
   - sndfile-cmp : compare the audio data of two files
   - sndfile-concat : concatenate two or more files
   - sndfile-convert : convert between sound file formats
   - sndfile-info : print information about files
   - sndfile-metadata-get/set : get and set file metadata
   - sndfile-play : play a sound file

sndfile-programs-dbgsym: debug symbols for sndfile-programs