SUSE-SU-2020:1619-1

Details

Description of the patch:

This update for audiofile fixes the following issues:

Security issue fixed:

CVE-2018-13440: Return AF_FAIL instead of causing NULL pointer dereferences later (bsc#1100523).

Affected Packages

audiofile

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

0.3.6-11.7.8

libaudiofile1

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

0.3.6-11.7.8

libaudiofile1-32bit

SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server 12 SP5SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP5

Fixed in:

0.3.6-11.7.8

audiofile-devel

SUSE Linux Enterprise Software Development Kit 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

0.3.6-11.7.8

References

ADVISORY

https://bugzilla.suse.com/1100523

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-June/006938.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-13440/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2020/suse-su-20201619-1/