Mageia 2019-0300: libsndfile security update
Summary
Updated libsndfile package fixes security vulnerability:
It was discovered that libsndfile incorrectly handled certain malformed
files. A remote attacker could use this issue to cause libsndfile to crash,
resulting in a denial of service, or possibly execute arbitrary code
(CVE-2019-3832).
References
- https://bugs.mageia.org/show_bug.cgi?id=25275
- https://ubuntu.com/security/notices/USN-4013-1
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3832
Resolution
MGASA-2019-0300 - Updated libsndfile packages fix security vulnerability
SRPMS
- 7/core/libsndfile-1.0.28-8.1.mga7