Debian Security Advisory
DSA-3814-1 audiofile -- security update
- Date Reported:
- 22 Mar 2017
- Affected Packages:
- Security database references:
- In the Debian bugtracking system: Bug 857651.
In Mitre's CVE dictionary: CVE-2017-6827, CVE-2017-6828, CVE-2017-6829, CVE-2017-6830, CVE-2017-6831, CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835, CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839.
- More information:
Several vulnerabilities have been discovered in the audiofile library, which may result in denial of service or the execution of arbitrary code if a malformed audio file is processed.
For the stable distribution (jessie), these problems have been fixed in version 0.3.6-2+deb8u2.
For the upcoming stable distribution (stretch), these problems have been fixed in version 0.3.6-4.
For the unstable distribution (sid), these problems have been fixed in version 0.3.6-4.
We recommend that you upgrade your audiofile packages.