Red Hat Product Errata RHSA-2024:11172 - Security Advisory
Issued:
2024-12-17
Updated:
2024-12-17

RHSA-2024:11172 - Security Advisory

Synopsis

Moderate: libsndfile security update

Type/Severity

Security Advisory: Moderate

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for libsndfile is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote() (CVE-2024-50612)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x

Fixes

  • BZ - 2322057 - CVE-2024-50612 libsndfile: Segmentation fault error in ogg_vorbis.c:417 vorbis_analysis_wrote()

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
x86_64
libsndfile-1.0.31-8.el9_4.1.i686.rpm SHA-256: 6665e59280955ff8969dfc42c863892205c9bd9451f0d94cb7b17f198106ee37
libsndfile-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: f879150a0d9ec32b34c14be1f754cdfa2fa7ce647640b215a1bc8f3c4705bce9
libsndfile-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: 0f4712b84002a3b59010031687bb783a6e29911da18b0c01f25e78f887b8836a
libsndfile-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 63853685d21c7e10b828d750f1375c9de91fd88fccb504ca620a7f016b5794fa
libsndfile-debugsource-1.0.31-8.el9_4.1.i686.rpm SHA-256: b6a60111d631e2a7cc973e1b4f01ac68f68e16bba77ada331817c9bb73ed2e4f
libsndfile-debugsource-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: e5f5f86aa78e11ba66158f0a0fc4b56364a93642cab979d9c2e8981273cd9260
libsndfile-utils-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: fc752e639ce0ace9fc3cb03e967fc6679af7cf36240c7f25c43ba0697fc7cffe
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: cf5971ffd0c225c1ea76f518ac60979b01b497de13221ee51ad3fa37ff80d987
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 78b827a592fd6a91fe618597a2a25ebcb49276ef059f993c505f1c47e0442142

Red Hat Enterprise Linux Server - AUS 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
x86_64
libsndfile-1.0.31-8.el9_4.1.i686.rpm SHA-256: 6665e59280955ff8969dfc42c863892205c9bd9451f0d94cb7b17f198106ee37
libsndfile-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: f879150a0d9ec32b34c14be1f754cdfa2fa7ce647640b215a1bc8f3c4705bce9
libsndfile-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: 0f4712b84002a3b59010031687bb783a6e29911da18b0c01f25e78f887b8836a
libsndfile-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 63853685d21c7e10b828d750f1375c9de91fd88fccb504ca620a7f016b5794fa
libsndfile-debugsource-1.0.31-8.el9_4.1.i686.rpm SHA-256: b6a60111d631e2a7cc973e1b4f01ac68f68e16bba77ada331817c9bb73ed2e4f
libsndfile-debugsource-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: e5f5f86aa78e11ba66158f0a0fc4b56364a93642cab979d9c2e8981273cd9260
libsndfile-utils-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: fc752e639ce0ace9fc3cb03e967fc6679af7cf36240c7f25c43ba0697fc7cffe
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: cf5971ffd0c225c1ea76f518ac60979b01b497de13221ee51ad3fa37ff80d987
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 78b827a592fd6a91fe618597a2a25ebcb49276ef059f993c505f1c47e0442142

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
s390x
libsndfile-1.0.31-8.el9_4.1.s390x.rpm SHA-256: efc765080e7aaab500bccd1903b25bf5d70d8c1afe0572b0bacd7b5ca84798b5
libsndfile-debuginfo-1.0.31-8.el9_4.1.s390x.rpm SHA-256: bf7a42ffadd6723908cb9a1e69795fa6735fa6274a72854554ed26d9e5f7b4e1
libsndfile-debugsource-1.0.31-8.el9_4.1.s390x.rpm SHA-256: 43e803e87f7b7b13e5a4dbc1ceae87e35ab51de3695fd0dd7e2e2605d3ab6e9d
libsndfile-utils-1.0.31-8.el9_4.1.s390x.rpm SHA-256: 7b1210b8c88be76a0ed84d4bf8d95cb3d8b355bff7adaf3f9701244b6a45c505
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.s390x.rpm SHA-256: c204a8e1695a040b4862f11afa71307e91503d4c042d0be54eb1e787410fb845

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
ppc64le
libsndfile-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 8973f0e9e3cad3861812947f914244b3379cc6b2e85f9791e0a85f972a7f773e
libsndfile-debuginfo-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 39f02b2c365385db971fbf08c825247abeb32a670aa15a32bbd7a1b918b2645f
libsndfile-debugsource-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: c30935a63c4b3df50f883a0594e979c6b748631b8f2c3d469699b87c6bc77251
libsndfile-utils-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 331e9fabcfaf6237a7c6ff7cadf21f5a3306b06c1fa5f6a08203af72944a9cac
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 82fbc3506de456a3bc409190891c69017fb8193c191e32bc6b7d1f09232465e2

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
aarch64
libsndfile-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 65664a3c3caebf9c8f8d09e6e1f12703a81cb64a83d1a9838004b1262324198a
libsndfile-debuginfo-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 92abf5ab6cc40f4ef3d66cfe281d29689a48ab55ed563b9c908aa60c4bcdfc24
libsndfile-debugsource-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 0ad9a8288df9bc43c6b46606f5588f4f8e2f18e49885aa5ef63f54a964d60830
libsndfile-utils-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: e4612d907a8706aa0b5b5d308b287660b9dc6400b5fc1cb557eee70cb81f8bba
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 4a70902b4bfef557479d1e1f192edf513f01a8fb28bfd0ae8034529af67d60d8

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
ppc64le
libsndfile-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 8973f0e9e3cad3861812947f914244b3379cc6b2e85f9791e0a85f972a7f773e
libsndfile-debuginfo-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 39f02b2c365385db971fbf08c825247abeb32a670aa15a32bbd7a1b918b2645f
libsndfile-debugsource-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: c30935a63c4b3df50f883a0594e979c6b748631b8f2c3d469699b87c6bc77251
libsndfile-utils-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 331e9fabcfaf6237a7c6ff7cadf21f5a3306b06c1fa5f6a08203af72944a9cac
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 82fbc3506de456a3bc409190891c69017fb8193c191e32bc6b7d1f09232465e2

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
x86_64
libsndfile-1.0.31-8.el9_4.1.i686.rpm SHA-256: 6665e59280955ff8969dfc42c863892205c9bd9451f0d94cb7b17f198106ee37
libsndfile-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: f879150a0d9ec32b34c14be1f754cdfa2fa7ce647640b215a1bc8f3c4705bce9
libsndfile-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: 0f4712b84002a3b59010031687bb783a6e29911da18b0c01f25e78f887b8836a
libsndfile-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 63853685d21c7e10b828d750f1375c9de91fd88fccb504ca620a7f016b5794fa
libsndfile-debugsource-1.0.31-8.el9_4.1.i686.rpm SHA-256: b6a60111d631e2a7cc973e1b4f01ac68f68e16bba77ada331817c9bb73ed2e4f
libsndfile-debugsource-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: e5f5f86aa78e11ba66158f0a0fc4b56364a93642cab979d9c2e8981273cd9260
libsndfile-utils-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: fc752e639ce0ace9fc3cb03e967fc6679af7cf36240c7f25c43ba0697fc7cffe
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: cf5971ffd0c225c1ea76f518ac60979b01b497de13221ee51ad3fa37ff80d987
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 78b827a592fd6a91fe618597a2a25ebcb49276ef059f993c505f1c47e0442142

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4

SRPM
x86_64
libsndfile-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: 0f4712b84002a3b59010031687bb783a6e29911da18b0c01f25e78f887b8836a
libsndfile-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 63853685d21c7e10b828d750f1375c9de91fd88fccb504ca620a7f016b5794fa
libsndfile-debugsource-1.0.31-8.el9_4.1.i686.rpm SHA-256: b6a60111d631e2a7cc973e1b4f01ac68f68e16bba77ada331817c9bb73ed2e4f
libsndfile-debugsource-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: e5f5f86aa78e11ba66158f0a0fc4b56364a93642cab979d9c2e8981273cd9260
libsndfile-devel-1.0.31-8.el9_4.1.i686.rpm SHA-256: 2d3dc4c7b8b363e0655212868ce38d386bbf5d8eca5b9022b9f85e402a8e7de6
libsndfile-devel-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 8c27d3fcb5e8f1cc7dfe09e8ee963a1afc1c683ff8e7146832b5bc3b2a346513
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.i686.rpm SHA-256: cf5971ffd0c225c1ea76f518ac60979b01b497de13221ee51ad3fa37ff80d987
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.x86_64.rpm SHA-256: 78b827a592fd6a91fe618597a2a25ebcb49276ef059f993c505f1c47e0442142

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4

SRPM
ppc64le
libsndfile-debuginfo-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 39f02b2c365385db971fbf08c825247abeb32a670aa15a32bbd7a1b918b2645f
libsndfile-debugsource-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: c30935a63c4b3df50f883a0594e979c6b748631b8f2c3d469699b87c6bc77251
libsndfile-devel-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 76cc8be2867d5dce83606aabcef39d1742d3e0d7e0cc73a84b6ff7491af410b2
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.ppc64le.rpm SHA-256: 82fbc3506de456a3bc409190891c69017fb8193c191e32bc6b7d1f09232465e2

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4

SRPM
s390x
libsndfile-debuginfo-1.0.31-8.el9_4.1.s390x.rpm SHA-256: bf7a42ffadd6723908cb9a1e69795fa6735fa6274a72854554ed26d9e5f7b4e1
libsndfile-debugsource-1.0.31-8.el9_4.1.s390x.rpm SHA-256: 43e803e87f7b7b13e5a4dbc1ceae87e35ab51de3695fd0dd7e2e2605d3ab6e9d
libsndfile-devel-1.0.31-8.el9_4.1.s390x.rpm SHA-256: 9c4da1119e032c8a02714ffb688e9c59ccf068b24471566590a1de86c92a9092
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.s390x.rpm SHA-256: c204a8e1695a040b4862f11afa71307e91503d4c042d0be54eb1e787410fb845

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4

SRPM
aarch64
libsndfile-debuginfo-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 92abf5ab6cc40f4ef3d66cfe281d29689a48ab55ed563b9c908aa60c4bcdfc24
libsndfile-debugsource-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 0ad9a8288df9bc43c6b46606f5588f4f8e2f18e49885aa5ef63f54a964d60830
libsndfile-devel-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 3d6d3bdafd260e3e703fd516ca9df8fb25c70898dc8bf7cbf2f1a92add6b42ae
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 4a70902b4bfef557479d1e1f192edf513f01a8fb28bfd0ae8034529af67d60d8

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
aarch64
libsndfile-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 65664a3c3caebf9c8f8d09e6e1f12703a81cb64a83d1a9838004b1262324198a
libsndfile-debuginfo-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 92abf5ab6cc40f4ef3d66cfe281d29689a48ab55ed563b9c908aa60c4bcdfc24
libsndfile-debugsource-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 0ad9a8288df9bc43c6b46606f5588f4f8e2f18e49885aa5ef63f54a964d60830
libsndfile-utils-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: e4612d907a8706aa0b5b5d308b287660b9dc6400b5fc1cb557eee70cb81f8bba
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.aarch64.rpm SHA-256: 4a70902b4bfef557479d1e1f192edf513f01a8fb28bfd0ae8034529af67d60d8

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4

SRPM
libsndfile-1.0.31-8.el9_4.1.src.rpm SHA-256: 13263c2e6a4be11728d56114a63d9b1f35050fab159a18ef6a396d12265a3b16
s390x
libsndfile-1.0.31-8.el9_4.1.s390x.rpm SHA-256: efc765080e7aaab500bccd1903b25bf5d70d8c1afe0572b0bacd7b5ca84798b5
libsndfile-debuginfo-1.0.31-8.el9_4.1.s390x.rpm SHA-256: bf7a42ffadd6723908cb9a1e69795fa6735fa6274a72854554ed26d9e5f7b4e1
libsndfile-debugsource-1.0.31-8.el9_4.1.s390x.rpm SHA-256: 43e803e87f7b7b13e5a4dbc1ceae87e35ab51de3695fd0dd7e2e2605d3ab6e9d
libsndfile-utils-1.0.31-8.el9_4.1.s390x.rpm SHA-256: 7b1210b8c88be76a0ed84d4bf8d95cb3d8b355bff7adaf3f9701244b6a45c505
libsndfile-utils-debuginfo-1.0.31-8.el9_4.1.s390x.rpm SHA-256: c204a8e1695a040b4862f11afa71307e91503d4c042d0be54eb1e787410fb845

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.