[Secure-testing-team] Bug#804447: libsndfile: CVE-2014-9756: division by zero leading to denial of service in psf_fwrite()

[Salvatore Bonaccorso]

Source: libsndfile
Version: 1.0.25-5
Severity: normal
Tags: security upstream
Forwarded: https://github.com/erikd/libsndfile/issues/92

Hi,

the following vulnerability was published for libsndfile.

CVE-2014-9756[0]:
division by zero leading to denial of service in psf_fwrite()

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2014-9756
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1177254
[2] https://github.com/erikd/libsndfile/commit/725c7dbb95bfaf8b4bb7b04820e3a00cceea9ce6
[3] https://github.com/erikd/libsndfile/issues/92
[4] https://bugzilla.novell.com/show_bug.cgi?id=953521

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore