[BSA-059] Security Update for libsndfile

2011-11-1404:20:30

lists.debian.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.075

Percentile

94.1%

JSON

Andres Salomon uploaded new packages for libsndfile which fixed the
following security problems:

CVE-2011-2696
Integer overflow by processing certain PARIS Audio Format (PAF)
files.

For the lenny-backports distribution the problem has been fixed in
version 1.0.21-3+squeeze1~bpo50+1.

For the stable distribution (squeeze), this problem has been fixed in
version 1.0.21-3+squeeze1.
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian6s390libsndfile1< 1.0.21-3+squeeze1libsndfile1_1.0.21-3+squeeze1_s390.deb
Debian5hppalibsndfile1< 1.0.17-4+lenny3libsndfile1_1.0.17-4+lenny3_hppa.deb
Debian5ia64libsndfile1< 1.0.17-4+lenny3libsndfile1_1.0.17-4+lenny3_ia64.deb
Debian6kfreebsd-amd64libsndfile1< 1.0.21-3+squeeze1libsndfile1_1.0.21-3+squeeze1_kfreebsd-amd64.deb
Debian5armlibsndfile1< 1.0.17-4+lenny3libsndfile1_1.0.17-4+lenny3_arm.deb
Debian6amd64libsndfile1< 1.0.21-3+squeeze1libsndfile1_1.0.21-3+squeeze1_amd64.deb
Debian5powerpclibsndfile1< 1.0.17-4+lenny3libsndfile1_1.0.17-4+lenny3_powerpc.deb
Debian5mipsellibsndfile1< 1.0.17-4+lenny3libsndfile1_1.0.17-4+lenny3_mipsel.deb
Debian6sparclibsndfile1< 1.0.21-3+squeeze1libsndfile1_1.0.21-3+squeeze1_sparc.deb
Debian6kfreebsd-i386libsndfile1-dev< 1.0.21-3+squeeze1libsndfile1-dev_1.0.21-3+squeeze1_kfreebsd-i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	s390	libsndfile1	< 1.0.21-3+squeeze1	libsndfile1_1.0.21-3+squeeze1_s390.deb
Debian	5	hppa	libsndfile1	< 1.0.17-4+lenny3	libsndfile1_1.0.17-4+lenny3_hppa.deb
Debian	5	ia64	libsndfile1	< 1.0.17-4+lenny3	libsndfile1_1.0.17-4+lenny3_ia64.deb
Debian	6	kfreebsd-amd64	libsndfile1	< 1.0.21-3+squeeze1	libsndfile1_1.0.21-3+squeeze1_kfreebsd-amd64.deb
Debian	5	arm	libsndfile1	< 1.0.17-4+lenny3	libsndfile1_1.0.17-4+lenny3_arm.deb
Debian	6	amd64	libsndfile1	< 1.0.21-3+squeeze1	libsndfile1_1.0.21-3+squeeze1_amd64.deb
Debian	5	powerpc	libsndfile1	< 1.0.17-4+lenny3	libsndfile1_1.0.17-4+lenny3_powerpc.deb
Debian	5	mipsel	libsndfile1	< 1.0.17-4+lenny3	libsndfile1_1.0.17-4+lenny3_mipsel.deb
Debian	6	sparc	libsndfile1	< 1.0.21-3+squeeze1	libsndfile1_1.0.21-3+squeeze1_sparc.deb
Debian	6	kfreebsd-i386	libsndfile1-dev	< 1.0.21-3+squeeze1	libsndfile1-dev_1.0.21-3+squeeze1_kfreebsd-i386.deb