File _patchinfo of Package patchinfo.6670

<patchinfo incident="6670">
  <issue id="1033054" tracker="bnc">VUL-1: CVE-2017-7585: libsndfile: stack-based buffer overflow via a specially crafted FLAC file (error in the "flac_buffer_copy()" function)</issue>
  <issue id="1033053" tracker="bnc">VUL-1: CVE-2017-7586: libsndfile: stack-based buffer overflow via a specially crafted FLAC file (error in the "header_read()" function)</issue>
  <issue id="1033914" tracker="bnc">VUL-0: CVE-2017-7742: libsndfile: versions before 1.0.28, function flac_buffer_copy() read memory access issue</issue>
  <issue id="1033915" tracker="bnc">VUL-0: CVE-2017-7741: libsndfile: versions before 1.0.28 have write memory access issue on function flac_buffer_copy()</issue>
  <issue id="2017-7586" tracker="cve" />
  <issue id="2017-7585" tracker="cve" />
  <issue id="2017-7741" tracker="cve" />
  <issue id="2017-7742" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>tiwai</packager>
  <description>
This update for libsndfile fixes the following security issues:

- CVE-2017-7586: A stack-based buffer overflow via a specially crafted FLAC
  file was fixed (error in the "header_read()" function) (bsc#1033053)
- CVE-2017-7585,CVE-2017-7741, CVE-2017-7742: Several stack-based buffer overflows via a specially crafted FLAC
  file (error in the "flac_buffer_copy()" function) were fixed (bsc#1033054,bsc#1033915,bsc#1033914).

This update was imported from the SUSE:SLE-12:Update update project.</description>
  <summary>Security update for libsndfile</summary>
</patchinfo>