Errata overview
Errata ID 580
Date 2019-01-16
Source package libsndfile
Fixed in version 1.0.25-9.1+deb8u3
Description
This update addresses the following issues:
* Buffer overflow in the flac_buffer_copy function (CVE-2017-8361)
* Out-of-bounds read in the flac_buffer_copy function (CVE-2017-8362)
* Heap buffer over-read in the flac_buffer_copy function (CVE-2017-8363)
* Buffer over-read in the l2les_array function (CVE-2017-8365)
* Out-of-bounds read in the function d2alaw_array() (CVE-2017-14245)
* Out-of-bounds read in the function d2ulaw_array() (CVE-2017-14246)
* Divide-by-zero in the double64_init() function (CVE-2017-14634)
* SEGV on unknown address in the function d2alaw_array() (CVE-2017-17456)
* SEGV on unknown address in the function d2ulaw_array() (CVE-2017-17457)
* stack-based buffer overflow in sndfile-deinterleave utility
  (CVE-2018-13139)
* OOB read in sf_write_int in sndfile.c (CVE-2018-19432)
* buffer over-read in the function i2ulaw_array in ulaw.c (CVE-2018-19661)
* buffer over-read in the function i2alaw_array in alaw.c (CVE-2018-19662)
Additional notes
CVE ID CVE-2017-8361
CVE-2017-8362
CVE-2017-8363
CVE-2017-8365
CVE-2017-14245
CVE-2017-14246
CVE-2017-14634
CVE-2017-17456
CVE-2017-17457
CVE-2018-13139
CVE-2018-19432
CVE-2018-19661
CVE-2018-19662
UCS Bug number #48450