Security update for libsndfile

This update for libsndfile fixes the following issues:

- CVE-2017-16942: Divide-by-zero in the function wav_w64_read_fmt_chunk(), which may lead to Denial of service (bsc#1069874).
- CVE-2017-6892: Fixed an out-of-bounds read memory access in the aiff_read_chanmap() (bsc#1043978).
- CVE-2017-14634: In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file. (bsc#1059911)
- CVE-2017-14245: An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of
the NAN and INFINITY floating-point values. (bsc#1059912)
- CVE-2017-14246: An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of
the NAN and INFINITY floating-point values.(bsc#1059913)

This update was imported from the SUSE:SLE-12:Update update project.

Fixed bugs
bnc#1069874
VUL-1: CVE-2017-16942: libsndfile: Divide-by-zero in the function wav_w64_read_fmt_chunk(), which may lead to DoS
bnc#1043978
VUL-0: CVE-2017-6892: libsndfile: out-of-bounds read memory access in the "aiff_read_chanmap()" function
bnc#1059911
VUL-0: CVE-2017-14634: libsndfile: divide-by-zero error exists in the function double64_init() in double64.c
bnc#1059912
VUL-0: CVE-2017-14245: libsndfile: out of bounds read in the function d2alaw_array() in alaw.c
bnc#1059913
VUL-0: CVE-2017-14246: libsndfile: out of bounds read in the function d2ulaw_array() in ulaw.c
Selected Binaries
openSUSE Build Service is sponsored by