Bug#1051891: libsndfile: CVE-2022-33065

2024-12-13 Thread Alessandro Astone
Dear maintainer, I've opened a Merge Request in salsa to import the patches as already uploaded to Ubuntu: https://salsa.debian.org/multimedia-team/libsndfile/-/merge_requests/3 There are also other unreleased changes in the salsa repository.

Bug#1051891: libsndfile: CVE-2022-33065

2023-09-13 Thread Moritz Mühlenhoff
Source: libsndfile X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for libsndfile. CVE-2022-33065[0]: | Multiple signed integers overflow in function au_read_header in | src/au.c and in functions mat4_open and mat4_read_head