Red Hat Product Errata RHSA-2021:3298 - Security Advisory
Issued:
2021-08-30
Updated:
2021-08-30

RHSA-2021:3298 - Security Advisory

Synopsis

Important: libsndfile security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libsndfile is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution (CVE-2021-3246)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
  • Red Hat Enterprise Linux Server - TUS 8.2 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.2 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.2 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.2 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.2 aarch64

Fixes

  • BZ - 1984319 - CVE-2021-3246 libsndfile: Heap buffer overflow via crafted WAV file allows arbitrary code execution

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
x86_64
libsndfile-1.0.28-10.el8_2.1.i686.rpm SHA-256: 1c1263fa9b2cb2dac0d266e60f933a5dadd72b6dddbc0a8c6469dd28e304e827
libsndfile-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: a41a7c4ed25c8e6dc0e018c7039f65ab3a24df717e06885c92731bba2df21ee5
libsndfile-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: e9d4c19a24e5daef707250aaad1f3a20a500d9df19f49a8a9be1184143a81d5b
libsndfile-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: e916616aa3e43e0a945b9275edcfe2c360b6be8798ad4981a6fd8f682a522e78
libsndfile-debugsource-1.0.28-10.el8_2.1.i686.rpm SHA-256: bfefb35beb8374d28fa4f5a8b91253b0469595b5969d3d2c1ccd1113b918c7a4
libsndfile-debugsource-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: f960243bd0cc45090dd1ac640b20bdf2bc413fbe71c25cd6d1c240c489cfc446
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: f05150c4331593569fdffdf076d3a16e31567a90bca4628367ae92eaa1c42545
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: 635a0dfe4d60e2767c00befb80f09e36e721dd34235c824d5d731519723363d9

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
x86_64
libsndfile-1.0.28-10.el8_2.1.i686.rpm SHA-256: 1c1263fa9b2cb2dac0d266e60f933a5dadd72b6dddbc0a8c6469dd28e304e827
libsndfile-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: a41a7c4ed25c8e6dc0e018c7039f65ab3a24df717e06885c92731bba2df21ee5
libsndfile-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: e9d4c19a24e5daef707250aaad1f3a20a500d9df19f49a8a9be1184143a81d5b
libsndfile-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: e916616aa3e43e0a945b9275edcfe2c360b6be8798ad4981a6fd8f682a522e78
libsndfile-debugsource-1.0.28-10.el8_2.1.i686.rpm SHA-256: bfefb35beb8374d28fa4f5a8b91253b0469595b5969d3d2c1ccd1113b918c7a4
libsndfile-debugsource-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: f960243bd0cc45090dd1ac640b20bdf2bc413fbe71c25cd6d1c240c489cfc446
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: f05150c4331593569fdffdf076d3a16e31567a90bca4628367ae92eaa1c42545
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: 635a0dfe4d60e2767c00befb80f09e36e721dd34235c824d5d731519723363d9

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
s390x
libsndfile-1.0.28-10.el8_2.1.s390x.rpm SHA-256: 1e3b8ebfdf0058e2e5dc2658d97875fdc7bd5742073ee1a2ff18127a5a9bb264
libsndfile-debuginfo-1.0.28-10.el8_2.1.s390x.rpm SHA-256: b12c4b9631dc93efe32d859a8b83ebeaabc52998a0da69da067cfa3aeebaf34e
libsndfile-debugsource-1.0.28-10.el8_2.1.s390x.rpm SHA-256: 6c725d6277bc39fe374386367bf64b6de08583bfca5dbd58a23114383fb67d02
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.s390x.rpm SHA-256: 62d2f8d54feef8f369ff6e2b05ad56ddf3b13b06387f36e8cc031d063eadfdd9

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
ppc64le
libsndfile-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 46699e3f6014cfe194350119fcb17d4b282107803d7184f716dcddb535c5cc4e
libsndfile-debuginfo-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 671cec40a1b90096066139e9782d433c6866f75e0beb2b4cf572f0cf7757c6e5
libsndfile-debugsource-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 393abf6bcbdc9f0719f05d3929ca461a18ac22bc4c9edff3a018c3fadcb5ab26
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: a997901ebfc59751efd24c307346e29cb5a0c4b70c3a2d5582d71b9ce4f6a80c

Red Hat Enterprise Linux Server - TUS 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
x86_64
libsndfile-1.0.28-10.el8_2.1.i686.rpm SHA-256: 1c1263fa9b2cb2dac0d266e60f933a5dadd72b6dddbc0a8c6469dd28e304e827
libsndfile-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: a41a7c4ed25c8e6dc0e018c7039f65ab3a24df717e06885c92731bba2df21ee5
libsndfile-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: e9d4c19a24e5daef707250aaad1f3a20a500d9df19f49a8a9be1184143a81d5b
libsndfile-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: e916616aa3e43e0a945b9275edcfe2c360b6be8798ad4981a6fd8f682a522e78
libsndfile-debugsource-1.0.28-10.el8_2.1.i686.rpm SHA-256: bfefb35beb8374d28fa4f5a8b91253b0469595b5969d3d2c1ccd1113b918c7a4
libsndfile-debugsource-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: f960243bd0cc45090dd1ac640b20bdf2bc413fbe71c25cd6d1c240c489cfc446
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: f05150c4331593569fdffdf076d3a16e31567a90bca4628367ae92eaa1c42545
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: 635a0dfe4d60e2767c00befb80f09e36e721dd34235c824d5d731519723363d9

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
aarch64
libsndfile-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: 30b098bfed8e247147cf6b090bde5cfce1515ee060eafac9f333e1e46fc0dba4
libsndfile-debuginfo-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: 514ea9bf34fd6151874b4eb5dcb93d5131a6ea7d653ac8aae32db73767037452
libsndfile-debugsource-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: b7d42058627d03a86d209d73138431f6b0c156b2ccd8710a928b070bfe625028
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: fbaf07e4906cccb1f1bc981c4625f9572f7754063e092039f3d96327d3c252a9

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
ppc64le
libsndfile-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 46699e3f6014cfe194350119fcb17d4b282107803d7184f716dcddb535c5cc4e
libsndfile-debuginfo-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 671cec40a1b90096066139e9782d433c6866f75e0beb2b4cf572f0cf7757c6e5
libsndfile-debugsource-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 393abf6bcbdc9f0719f05d3929ca461a18ac22bc4c9edff3a018c3fadcb5ab26
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: a997901ebfc59751efd24c307346e29cb5a0c4b70c3a2d5582d71b9ce4f6a80c

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.2

SRPM
libsndfile-1.0.28-10.el8_2.1.src.rpm SHA-256: 91869691c338cfb217a8b4bab289fc3a6e11f82b36f01624887e10f6fe6cece0
x86_64
libsndfile-1.0.28-10.el8_2.1.i686.rpm SHA-256: 1c1263fa9b2cb2dac0d266e60f933a5dadd72b6dddbc0a8c6469dd28e304e827
libsndfile-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: a41a7c4ed25c8e6dc0e018c7039f65ab3a24df717e06885c92731bba2df21ee5
libsndfile-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: e9d4c19a24e5daef707250aaad1f3a20a500d9df19f49a8a9be1184143a81d5b
libsndfile-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: e916616aa3e43e0a945b9275edcfe2c360b6be8798ad4981a6fd8f682a522e78
libsndfile-debugsource-1.0.28-10.el8_2.1.i686.rpm SHA-256: bfefb35beb8374d28fa4f5a8b91253b0469595b5969d3d2c1ccd1113b918c7a4
libsndfile-debugsource-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: f960243bd0cc45090dd1ac640b20bdf2bc413fbe71c25cd6d1c240c489cfc446
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: f05150c4331593569fdffdf076d3a16e31567a90bca4628367ae92eaa1c42545
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: 635a0dfe4d60e2767c00befb80f09e36e721dd34235c824d5d731519723363d9

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.2

SRPM
x86_64
libsndfile-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: e9d4c19a24e5daef707250aaad1f3a20a500d9df19f49a8a9be1184143a81d5b
libsndfile-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: e916616aa3e43e0a945b9275edcfe2c360b6be8798ad4981a6fd8f682a522e78
libsndfile-debugsource-1.0.28-10.el8_2.1.i686.rpm SHA-256: bfefb35beb8374d28fa4f5a8b91253b0469595b5969d3d2c1ccd1113b918c7a4
libsndfile-debugsource-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: f960243bd0cc45090dd1ac640b20bdf2bc413fbe71c25cd6d1c240c489cfc446
libsndfile-devel-1.0.28-10.el8_2.1.i686.rpm SHA-256: cc00fca03b5fd72e4011029c16fe717e627996a79d47a3a06157e46b309dd6ae
libsndfile-devel-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: 374aafb3c4c49f9cc436536ce8cc7523608dd2fe9dc2b0e92b3d548560560273
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.i686.rpm SHA-256: f05150c4331593569fdffdf076d3a16e31567a90bca4628367ae92eaa1c42545
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.x86_64.rpm SHA-256: 635a0dfe4d60e2767c00befb80f09e36e721dd34235c824d5d731519723363d9

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.2

SRPM
ppc64le
libsndfile-debuginfo-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 671cec40a1b90096066139e9782d433c6866f75e0beb2b4cf572f0cf7757c6e5
libsndfile-debugsource-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 393abf6bcbdc9f0719f05d3929ca461a18ac22bc4c9edff3a018c3fadcb5ab26
libsndfile-devel-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: 87bec0365d476393fe7dcadc20587fa5016d623f43f134976217bac03e05309f
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.ppc64le.rpm SHA-256: a997901ebfc59751efd24c307346e29cb5a0c4b70c3a2d5582d71b9ce4f6a80c

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 8.2

SRPM
s390x
libsndfile-debuginfo-1.0.28-10.el8_2.1.s390x.rpm SHA-256: b12c4b9631dc93efe32d859a8b83ebeaabc52998a0da69da067cfa3aeebaf34e
libsndfile-debugsource-1.0.28-10.el8_2.1.s390x.rpm SHA-256: 6c725d6277bc39fe374386367bf64b6de08583bfca5dbd58a23114383fb67d02
libsndfile-devel-1.0.28-10.el8_2.1.s390x.rpm SHA-256: 1d4f3a1d854f2306f17a931a38b60334126814efe6f05ac1bed59a9ddd8d369a
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.s390x.rpm SHA-256: 62d2f8d54feef8f369ff6e2b05ad56ddf3b13b06387f36e8cc031d063eadfdd9

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.2

SRPM
aarch64
libsndfile-debuginfo-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: 514ea9bf34fd6151874b4eb5dcb93d5131a6ea7d653ac8aae32db73767037452
libsndfile-debugsource-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: b7d42058627d03a86d209d73138431f6b0c156b2ccd8710a928b070bfe625028
libsndfile-devel-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: bf0b0e8d78f632b6fb2727b096d768e9f7c12ee78bfac2a464faee704bb8d384
libsndfile-utils-debuginfo-1.0.28-10.el8_2.1.aarch64.rpm SHA-256: fbaf07e4906cccb1f1bc981c4625f9572f7754063e092039f3d96327d3c252a9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.