ELSA-2020-3877

ELSA-2020-3877 - audiofile security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-10-06

Description

[1:0.3.6-9]
- Apply security patches. CVE-2018-17095, CVE-2018-13440
- Resolves: rhbz#1600369, rhbz#1601014, rhbz#1637128

[1:0.3.6-8]
- Escape macros in %changelog

[1:0.3.6-7]
- Merge upstream pull requests #42,#43,#44 from Agostino Sarubbo to fix
security issues. CVE-2017-6827, CVE-2017-6828,
CVE-2017-6829, CVE-2017-6830, CVE-2017-6831,
CVE-2017-6832, CVE-2017-6833, CVE-2017-6834, CVE-2017-6835,
CVE-2017-6836, CVE-2017-6837, CVE-2017-6838, CVE-2017-6839

[1:0.3.6-6]
- patch to compile with GCC 6

[1:0.3.6-5]
- Merge fix from upstream pull request #25 for CVE-2015-7747.
Test conversion from e.g. 16-bit LE stereo to 8-bit LE mono
no longer causes corruption.

Related CVEs

CVE-2018-17095

CVE-2018-13440

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	audiofile-0.3.6-9.el7.src.rpm	7d42011d3f83340009d6004da83346bce1d9f964ad41a0a755a45694b2f1da39	-	ol7_aarch64_optional_beta
	audiofile-0.3.6-9.el7.src.rpm	7d42011d3f83340009d6004da83346bce1d9f964ad41a0a755a45694b2f1da39	-	ol7_aarch64_optional_latest
	audiofile-0.3.6-9.el7.aarch64.rpm	17a25d5b8c6b9d1dd4b4f42f5bc62c66b3d70b581ca78e121b9abadff18fb493	-	ol7_aarch64_optional_beta
	audiofile-0.3.6-9.el7.aarch64.rpm	17a25d5b8c6b9d1dd4b4f42f5bc62c66b3d70b581ca78e121b9abadff18fb493	-	ol7_aarch64_optional_latest
	audiofile-devel-0.3.6-9.el7.aarch64.rpm	27039f350512c12b38d53fcb2259233e352fecaaf1bc7a7ee95bde5471f0e8d7	-	ol7_aarch64_optional_beta
	audiofile-devel-0.3.6-9.el7.aarch64.rpm	27039f350512c12b38d53fcb2259233e352fecaaf1bc7a7ee95bde5471f0e8d7	-	ol7_aarch64_optional_latest
Oracle Linux 7 (x86_64)	audiofile-0.3.6-9.el7.src.rpm	7d42011d3f83340009d6004da83346bce1d9f964ad41a0a755a45694b2f1da39	-	ol7_x86_64_optional_beta
	audiofile-0.3.6-9.el7.src.rpm	7d42011d3f83340009d6004da83346bce1d9f964ad41a0a755a45694b2f1da39	-	ol7_x86_64_optional_latest
	audiofile-0.3.6-9.el7.i686.rpm	0d1625eadcbf20dfda9af81e40819d48644d4470a6883dbbf79a7e3ec1f1fc0d	-	ol7_x86_64_optional_beta
	audiofile-0.3.6-9.el7.i686.rpm	0d1625eadcbf20dfda9af81e40819d48644d4470a6883dbbf79a7e3ec1f1fc0d	-	ol7_x86_64_optional_latest
	audiofile-0.3.6-9.el7.x86_64.rpm	9d4983909d159592af9c89c7ad8c37eded6fb0fc5b9b628dc862e6ecc9f5088a	-	ol7_x86_64_optional_beta
	audiofile-0.3.6-9.el7.x86_64.rpm	9d4983909d159592af9c89c7ad8c37eded6fb0fc5b9b628dc862e6ecc9f5088a	-	ol7_x86_64_optional_latest
	audiofile-devel-0.3.6-9.el7.i686.rpm	41bf7e97283f4a57b38b13109301130123fe9d59dbb9295ae7d50f0a1a960a6d	-	ol7_x86_64_optional_beta
	audiofile-devel-0.3.6-9.el7.i686.rpm	41bf7e97283f4a57b38b13109301130123fe9d59dbb9295ae7d50f0a1a960a6d	-	ol7_x86_64_optional_latest
	audiofile-devel-0.3.6-9.el7.x86_64.rpm	f32298da29c2114155e6b9543737aa713486971a295e6e01d3a2fcdb955a2aae	-	ol7_x86_64_optional_beta
	audiofile-devel-0.3.6-9.el7.x86_64.rpm	f32298da29c2114155e6b9543737aa713486971a295e6e01d3a2fcdb955a2aae	-	ol7_x86_64_optional_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team