Accepted libsndfile 1.0.27-3+deb9u2 (source amd64) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 29 Jul 2021 19:03:02 +0200
Source: libsndfile
Binary: libsndfile1-dev libsndfile1 sndfile-programs libsndfile1-dbg sndfile-programs-dbg
Architecture: source amd64
Version: 1.0.27-3+deb9u2
Distribution: stretch-security
Urgency: high
Maintainer: Erik de Castro Lopo <erikd@mega-nerd.com>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libsndfile1 - Library for reading/writing audio files
libsndfile1-dbg - debugging symbols for libsndfile
libsndfile1-dev - Development files for libsndfile; a library for reading/writing a
sndfile-programs - Sample programs that use libsndfile
sndfile-programs-dbg - debugging symbols for sndfile-programs
Closes: 991496
Changes:
libsndfile (1.0.27-3+deb9u2) stretch-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2021-3246 (Closes: #991496)
A crafted WAV file can trigger a heap buffer overflow and might
allow exectution of arbitrary code.
Checksums-Sha1:
3cb62c98895c1d6fb130d09009af5a7e95125b41 2512 libsndfile_1.0.27-3+deb9u2.dsc
e112d4937352d1722b06911b00c79e9bce15095c 1192337 libsndfile_1.0.27.orig.tar.gz
61051858cc601a9d8870419049537295fd11b594 17508 libsndfile_1.0.27-3+deb9u2.debian.tar.xz
457b98729e24988e400f272203980ef18ed82bdd 458676 libsndfile1-dbg_1.0.27-3+deb9u2_amd64.deb
ba50e39c33d0df83bdb93dc6c22324340bfef1f6 361746 libsndfile1-dev_1.0.27-3+deb9u2_amd64.deb
43d3dea76bdbdb1a3cd2372abbeeaaa117ea1d57 248254 libsndfile1_1.0.27-3+deb9u2_amd64.deb
a00fa9c7ba2f5144bfecc333c58eb82326439712 7620 libsndfile_1.0.27-3+deb9u2_amd64.buildinfo
6eb887679539d773d1abd62abc331d22dc678634 160430 sndfile-programs-dbg_1.0.27-3+deb9u2_amd64.deb
f43d5bf043de02d1b597425914904ff55dba1ab4 126718 sndfile-programs_1.0.27-3+deb9u2_amd64.deb
Checksums-Sha256:
e2e4714848d27021c3611d31d14af044dfbf58aa5f39cc383a845d176f1133f8 2512 libsndfile_1.0.27-3+deb9u2.dsc
a391952f27f4a92ceb2b4c06493ac107896ed6c76be9a613a4731f076d30fac0 1192337 libsndfile_1.0.27.orig.tar.gz
e81c73ba7cd2f075cd1ffff262434a427d6479ec7c76008a9009600fed223fa1 17508 libsndfile_1.0.27-3+deb9u2.debian.tar.xz
fc9f3607ebbd7af779829b23a391c57d3bc620646ed6a563c36abb01e9290c8f 458676 libsndfile1-dbg_1.0.27-3+deb9u2_amd64.deb
13f1d518b160250e6056c3aa9e4d00397178ea5459a20fb1824214e4a1935e1d 361746 libsndfile1-dev_1.0.27-3+deb9u2_amd64.deb
a608f2b2646c33f9963dc8f42be6c7283d3cca4e2e26975035d8db6b2e24663e 248254 libsndfile1_1.0.27-3+deb9u2_amd64.deb
a4d5769e1d881985dcffec0f0751d9688cee03672a966fc2a51c68b5ef3447cc 7620 libsndfile_1.0.27-3+deb9u2_amd64.buildinfo
69c395c3b8fdb364dfa9bad2b3aab1492a7aa81648071a7cb60e6ec58ef973fb 160430 sndfile-programs-dbg_1.0.27-3+deb9u2_amd64.deb
f16c6fb1e791608375a5a7b20c96d48d14e27f6418ee62021ecf3d7c96e47412 126718 sndfile-programs_1.0.27-3+deb9u2_amd64.deb
Files:
b9ac1f9596d00a25ef4f7295ab7cca1f 2512 devel optional libsndfile_1.0.27-3+deb9u2.dsc
fd1d97c6077f03b5d984d7956ffedb7a 1192337 devel optional libsndfile_1.0.27.orig.tar.gz
751a9da1f9d0a55a97fdcec1685c25c6 17508 devel optional libsndfile_1.0.27-3+deb9u2.debian.tar.xz
bbc656f7ca75fa3e110767eb2279f479 458676 debug extra libsndfile1-dbg_1.0.27-3+deb9u2_amd64.deb
b7843c94d5019064a906200e48a71085 361746 libdevel optional libsndfile1-dev_1.0.27-3+deb9u2_amd64.deb
3b1e8999325495e964dcb846db9527ee 248254 libs optional libsndfile1_1.0.27-3+deb9u2_amd64.deb
aad1af79c03698a17d0c754d4becca1d 7620 devel optional libsndfile_1.0.27-3+deb9u2_amd64.buildinfo
63d2cfb9b0048143812b1070e6f1844b 160430 debug extra sndfile-programs-dbg_1.0.27-3+deb9u2_amd64.deb
3caf1ad0b02cf50ed162da6c2728855a 126718 utils optional sndfile-programs_1.0.27-3+deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmEDJOlfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR5uKEACDH32Nz/si6WnmSLy+vKSIPqQwOjp4
l5FSqt8z3/lPRRYXtv0T1aLLGEP87bxBMtbuc0ykWmGFo+cimPEm+eJx2VEdh1uW
jzZjGUcpFcuC5QLdHAX+zzFOg+sm7y1U4PuqudeWUiiy4AOUBq8wV6kGb6xPxOxl
Pt9XwQ3RPwMvOM3Y+c3RxAyjJlypMKnLRTblk8j2dO/aE59McBnySKOkc+LqT2PJ
NNBQgGySppsQIqDx1IADfDQbmTRLQ2oYLnF0yGLSHHlnwxb7bAOvezXXkZcuRnqY
foA/23szVJvzqT8IhzJvpPj7wQTqtcQz9IS8opt+b36Hiw1FYAeCh7zrChGkoBp8
NSm13aZ27BQEgEKrTCjFqEqLp8shjrdi+lODKPOKfuh5jzd7sHw5bXMLwz/t2Tuu
rP4yjsMmZRHpdYiTFD4/qyM6E9BcxT0SDc626zL07RBPSXWp+Air8/24lOMPw/xb
JcirmQW+7K0740mZttRMXYTr0ULgvaCD9FLHqsyZddq5aEyXScIORdFr3cc/TV1t
zCOxH0iYcQLk6yRy5A31IrSA6ov8gyil5POOjmKOeU4wE4x7gr764OEU3AvXaQnM
3GmimhNPR5qn7Py5n+RKHU5lmm5fd1KKHG0JNnRQC91f4L6BwDIalismEjEvZMFp
1QbtCTkg+hyPQQ==
=qDzv
-----END PGP SIGNATURE-----