-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2010-3855 2010-12-29 18:14:31 --------------------------------------------------------------------------------

Name : libsndfile Product : Fedora EPEL 5 Version : 1.0.17 Release : 4.el5 URL : http://www.mega-nerd.com/libsndfile/ Summary : Library for reading and writing sound files Description : libsndfile is a C library for reading and writing sound files such as AIFF, AU, WAV, and others through one standard interface. It can currently read/write 8, 16, 24 and 32-bit PCM files as well as 32 and 64-bit floating point WAV files and a number of compressed formats. It compiles and runs on *nix, MacOS, and Win32.

-------------------------------------------------------------------------------- Update Information:

- fixes CVE-2009-1788 : VOC file heap based buffer overflow - fixes CVE-2009-1791 : AIFF file heap based buffer overflow -------------------------------------------------------------------------------- References:

[ 1 ] Bug #502657 - CVE-2009-1788 libsndfile VOC file heap based buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=502657 [ 2 ] Bug #502658 - CVE-2009-1791 libsndfile AIFF file heap based buffer overflow https://bugzilla.redhat.com/show_bug.cgi?id=502658 --------------------------------------------------------------------------------

This update can be installed with the "yum" update programs. Use su -c 'yum update libsndfile' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------