RHSA-2024:3030: Moderate: libsndfile security update
libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. <br>Security Fix(es):<br><li> libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2024:3030?
The severity of RHSA-2024:3030 is classified as moderate due to an integer overflow vulnerability that can lead to Denial of Service.
How do I fix RHSA-2024:3030?
To fix RHSA-2024:3030, update the libsndfile package to version 1.0.28-14.el8 or later.
Which versions of libsndfile are affected by RHSA-2024:3030?
Versions of libsndfile prior to 1.0.28-14.el8 are affected by RHSA-2024:3030.
What type of vulnerability is described in RHSA-2024:3030?
RHSA-2024:3030 describes an integer overflow vulnerability in the libsndfile library.
What software is impacted by RHSA-2024:3030?
RHSA-2024:3030 impacts the libsndfile package and its associated development and utility packages.