DSA-3814-1 audiofile -- security update

Debian Security Advisory

DSA-3814-1 audiofile -- security update

Date Reported:

22 Mar 2017

Affected Packages:

audiofile

Vulnerable:

Yes

Security database references:

In the Debian bugtracking system: Bug 857651.
In Mitre's CVE dictionary: CVE-2017-6827, CVE-2017-6828, CVE-2017-6829, CVE-2017-6830, CVE-2017-6831, CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835, CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839.

More information:

Several vulnerabilities have been discovered in the audiofile library, which may result in denial of service or the execution of arbitrary code if a malformed audio file is processed.

For the stable distribution (jessie), these problems have been fixed in version 0.3.6-2+deb8u2.

For the upcoming stable distribution (stretch), these problems have been fixed in version 0.3.6-4.

For the unstable distribution (sid), these problems have been fixed in version 0.3.6-4.

We recommend that you upgrade your audiofile packages.