-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4947-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
July 30, 2021                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : libsndfile
CVE ID         : CVE-2021-3246
Debian Bug     : 991496

Andrea Fioraldi discovered a buffer overflow in libsndfile, a library
for reading/writing audio files, which could result in denial of service
or potentially the execution of arbitrary code when processing a
malformed audio file.

For the stable distribution (buster), this problem has been fixed in
version 1.0.28-6+deb10u1.

We recommend that you upgrade your libsndfile packages.

For the detailed security status of libsndfile please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libsndfile

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=/3hL
-----END PGP SIGNATURE-----