CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

audio/linux-c7-libsndfile1.0.25_7

Reading and writing files containing sampled sound (like WAV or AIFF) (Linux CentOS 7.9.2009)

6
unaddressed
8
VuXML only, still affected
0
fixed
Maintainer
emulation@FreeBSD.org
Packages
linux-c7-libsndfile 1.0.25_7
Upstream
up to date
CPE
libsndfile_project:libsndfile from the port
WWW
http://www.mega-nerd.com/libsndfile/
Links
cgit · VuXML

Unaddressed (6) · The CVE record lists this version as affected, no VuXML entry names the CVE

Updating to 1.0.26 would fix 2 of 6 unaddressed CVEs, according to the CVE records.
CVE-2025-521947.52025-08-21A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs…
CVE-2024-506136.52024-10-27libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
CVE-2017-169426.52017-11-25In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted…
CVE-2024-506125.52024-10-27libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
CVE-2014-97565.02015-11-19The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors rel…
CVE-2014-94962.12015-01-16The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which tri…

VuXML only (8) · listed, port not fixed yet

CVE-2017-77415.52017-04-12VuXML · In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a s…
CVE-2017-77425.52017-04-12VuXML · In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a sp…
CVE-2017-75855.52017-04-07VuXML · In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC …
CVE-2017-75865.52017-04-07VuXML · In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a spe…

Fixed (0)

No VuXML entries for this package.

Commits (19)

Tijl Coosemans (tijl) · 1.0.25_7
audio/linux-c7-libsndfile: Update to 1.0.25-12.el7_9.1
bc6d6999a0
Stefan Eßer (se) · 1.0.25_6
Add missing WWW entries

These ports reference the pkg-descr file of some other port and used
to get the WWW entry from that other port's file.

Reported by:	dan@langille.org (Dan Langille)
60764ff075
Tobias C. Berner (tcberner) · 1.0.25_6
audio: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  <dmagda+libsamplerate@ee.ryerson.ca>
  *  <trasz@FreeBSD.org>
  *  Adam Weinberger
  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Akinori MUSHA aka knu <knu@idaemons.org>
  *  Aleksander Fafula <alex@bsdguru.org>
  *  Alex Allan <alex@kamaz.org.uk>
  *  Alexander Botero-Lowry <alex@foxybanana.com>
  *  Alexander Kojevnikov <alexander@kojevnikov.com>
  *  Alexander Nedotsukov <bland@FreeBSD.org>
  *  Alexander Vereeken <Alexander88207@protonmail.com>
  *  Alexander Yerenkow <yerenkow@gmail.com>
  *  Alexandr Kovalenko <never@nevermind.kiev.ua>
  *  Alexey Dokuchaev <danfe@FreeBSD.org>
  *  Anders Nordby <anders@FreeBSD.org>
  *  Anders Nordby <anders@fix.no>
  *  Andreas Kohn <andreas@syndrom23.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Anes Mukhametov <anes@anes.su>
  *  Anthony Ginepro <anthony.ginepro@laposte.net>
  *  Anton Yuzhaninov <citrin@citrin.ru>
  *  Aragon Gouveia <aragon@phat.za.net>
  *  Ashish SHUKLA <wahjava@gmail.com>
  *  Ayumi M <ayu@commun.jp>
  *  Ayumi Mitsui <ayu@commun.jp>
  *  Bartoletti <lbartoletti@FreeBSD.org>
  *  Bernard Spil <brnrd@FreeBSD.org>
  *  Bill Fenner <fenner@FreeBSD.org>
  *  Brad Walker <tha_walka@hotmail.com>
  *  Brett Taylor <brett@peloton.physics.montana.edu>
  *  Byung-Hee HWANG <bh@izb.knu.ac.kr>
  *  Carey Jones <mcj@acquiesce.org>
  *  Carlos J. Puga Medina <cpm@FreeBSD.org>
  *  Cezary Morga <cm@therek.net>
  *  Chao Shin <quakelee@cn.freebsd.org>
  *  Charles Mercadal <mercadal@diablonet.net>
  *  Chia-liang Kao <clkao@CirX.ORG>
  *  Chip Marshall <chip@eboai.org>
  *  Choi Jun Ho <junker@moderato.snu.ac.kr>
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Christian Laursen <xi@borderworlds.dk>
  *  Christopher Key <cjk32@cam.ac.uk>
  *  Daniel Menelkir <dmenelkir@gmail.com>
  *  Daniel O'Connor
  *  David Bushong <david@bushong.net>
  *  David Le Brun <david@dyn-ns.net>
  *  David MacKenzie <djm@pix.net>
  *  David Naylor <dbn@FreeBSD.org>
  *  David Naylor <naylor.b.david@gmail.com>
  *  David Yeske <dyeske@gmail.com>
  *  Denise H. G. <darcsis@gmail.com>
  *  Dennis Herrmann <adox@mcx2.org>
  *  Dennis Herrmann <dhn@FreeBSD.org>
  *  Devon Ryan <dpryan@dpryan.com>
  *  Ditesh Shashikant Gathani <ditesh@gathani.org>
  *  Dmitry Afanasiev <KOT@MATPOCKuH.Ru>
  *  Dominic Mitchell <dom@happygiraffe.net>
  *  Dominique Goncalves <dominique.goncalves@gmail.com>
  *  Dryice Liu <dryice@dryice.name>
  *  Edward Tomasz Napierala <trasz@FreeBSD.org>
  *  Edward Tomasz Napierala <trasz@pin.if.uz.zgora.pl>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eric Anholt <anholt@FreeBSD.org>
  *  Erik Cederstrand <erich@FreeBSD.org>
  *  Francisco Gomez <francisco@gomezmarin.com>
  *  Frank Laszlo <laszlof@vonostingroup.com>
  *  František Dvořák <valtri@civ.zcu.cz>
  *  Fraser Tweedale <frase@frase.id.au>
  *  Gabor Kovesdan
  *  Gabor Zahemszky <Gabor@Zahemszky.HU>
  *  Ganael Laplanche <ganael.laplanche@martymac.org>
  *  Gea-Suan Lin <gslin@gslin.org>
  *  Gennady Sorokopud <gena@NetVision.net.il>
  *  George Reid <greid@FreeBSD.org>
  *  George Reid <greid@ukug.uk.freebsd.org>
  *  Goran Mekić <meka@tilda.center>
  *  Grzegorz Blach <gblach@FreeBSD.org>
  *  Gustau Perez <gustau.perez@gmail.com>
  *  Hans Petter Selasky <hselasky@FreeBSD.org>
  *  Hans Petter Selasky <hselasky@freebsd.org>
  *  Hye-Shik Chang
  *  Hye-Shik Chang <perky@FreeBSD.org>
  *  Jaap Akkerhuis <jaap@NLnetLabs.nl>
  *  Jamie Heckford <jamie@blackhole.net>
  *  Jean-Marc Zucconi <jmz@FreeBSD.org>
  *  Jean-Yves Lefort <jylefort@FreeBSD.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Jerry Eriksson <jerry@freebsd.se>
  *  Jim Mock <jim@FreeBSD.org>
  *  Jin-Shan Tseng <tjs@cdpa.nsysu.edu.tw>
  *  Joao Carlos Mendes Luis <jonny@jonny.eng.br>
  *  Joe Marcus Clarke <marcus@FreeBSD.org>
  *  John Hixson <jhixson@FreeBSD.org>
  *  John Hixson <john@pcbsd.org>
  *  Jonathan Lennox <lennox@cs.columbia.edu>
  *  Joris Vandalon <joris@vandalon.nl>
  *  Juha Erkkilä <erkkila@cc.jyu.fi>
  *  Juha Nygard <juha.nygard1@netikka.fi>
  *  Kawaguti Ginga <ginga@athena.club.ne.jp>
  *  Kengo Ichiki <kichiki@users.sourceforge.net>
  *  Koine Yuusuke(koinec) <koinec@users.osdn.me>
  *  Konstantinos Konstantinidis <kkonstan@daemon.gr>
  *  Koop Mast <kwm@FreeBSD.org>
  *  Lars Engels <lars.engels@0x20.net>
  *  Lars Engels <lme@FreeBSD.org>
  *  Lars Thegler <lth@FreeBSD.org>
  *  Leo Kim <leo@florida.sarang.net>
  *  Liam J. Foy <liamfoy@sepulcrum.org>
  *  Manuel Creach <manuel.creach@icloud.com>
  *  Marc van Woerkom <3d@FreeBSD.org>
  *  Mario Sergio Fujikawa Ferreira <lioux@FreeBSD.org>
  *  Mark Felder <feld@FreeBSD.org>
  *  Mark Kane <mark@mkproductions.org>
  *  Mark Pulford <mark@kyne.com.au>
  *  Mark Reidel <ports@mark.reidel.info>
  *  Mark Reidel <ports@mark.reidle.info>
  *  Martin Blapp <mbr@FreeBSD.org>
  *  Martin Dieringer <Martin.Dieringer@t-online.de>
  *  Martin Kraft <martin.kraft@fal.de>
  *  Martin Matuska <mm@FreeBSD.org>
  *  Martin Wilke (miwi@FreeBSD.org)
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Masanori Kiriake <seiken@nbs.co.jp>
  *  Mathew Kanner <mat@hak.cnd.mcgill.ca>
  *  Matt Tosto <datahead4@gmail.com>
  *  Matthias Andree <matthias.andree@gmx.de>
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Michael Beer <beerml@sigma6audio.de>
  *  Michael Haro <mharo@area51.fremont.ca.us>
  *  Michael Johnson <ahze@FreeBSD.org>
  *  Michael Johnson <ahze@ahze.net>
  *  Michael Nottebrock <michaelnottebrock@gmx.net>
  *  Michael Vasilenko <acid@stu.cn.ua>
  *  Mike Makonnen <mtm@identd.net>
  *  Munish Chopra <mchopra@engmail.uwaterloo.ca>
  *  Mykola Dzham <i@levsha.me>
  *  Nadelyaev Stanislav <funkblaster@n11.bmstu.ru>
  *  Necati Ersen SISECI <siseci@enderunix.org>
  *  Nicola Vitale <nivit@FreeBSD.org>
  *  Nicola Vitale <nivit@email.it>
  *  Nicolas Herry <nicolasherry@gmail.com>
  *  Oliver Breuninger <ob@breuninger.org>
  *  Oliver Fromme <oliver.fromme@heim3.tu-clausthal.de>
  *  Oliver Lehmann <oliver@FreeBSD.org>
  *  Olivier Duchateau
  *  Oyvind Moll <oyvindmo@initio.no>
  *  Pav Lucistnik <pav@FreeBSD.org>
  *  Pav Lucistnik <pav@oook.cz>
  *  Peter Pentchev <roam@FreeBSD.org>
  *  Philip Paeps <philip@paeps.cx>
  *  Philippe Audeoud <jadawin@tuxaco.net>
  *  Pietro Cerutti <gahr@FreeBSD.org>
  *  Piotr Kubaj <emulation@FreeBSD.org$
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Putrya Statislav
  *  Rahul Siddharthan <rsidd@online.fr>
  *  Rich Neese <r.neese@gmail.com>
  *  Richard Neese
  *  Rob Zinkov <rzinkov@gmail.com>
  *  Romain Tartiere <romain@blogreen.org>
  *  Romain Tartière <romain@blogreen.org>
  *  Roman Bogorodskiy
  *  Roman Shterenzon <roman@xpert.com>
  *  Sander Janssen <janssen@rendo.dekooi.nl>
  *  Sascha Klauder <sklauder@trimind.de>
  *  Satoshi Taoka <taoka@FreeBSD.org>
  *  Sean McGovern <sean@sfarc.net>
  *  Sergey Akifyev <asa@gascom.ru>
  *  Seth Kingsley <sethk@osd.bsdi.com>
  *  Simon 'corecode' Schubert <corecode@corecode.ath.cx>
  *  Simon Barner <barner@gmx.de>
  *  Stas Timokhin <stast@bsdportal.ru>
  *  Stefan Ehmann <shoesoft@gmx.net>
  *  Stefan Jahn <stefan.jahn@nemesis-sektor.de>
  *  Stefan Zehl <sec@42.org>
  *  Stepan Zastupov [RedChrom] <redchrom@gmail.com>
  *  Steve Wills <swills@FreeBSD.org>
  *  Sue Blake <sue@FreeBSD.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
  *  TOMIDA, Hiroaki <t.hiroaki.209 at gmail.com>
  *  Tatsuki Makino <tatsuki_makino@hotmail.com>
  *  The Anarcat <anarcat@anarcat.dyndns.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Thomas M. Hermann <tmh.public@gmail.com>
  *  Thomas Runge <runge@rostock.zgdv.de>
  *  Thomas Zander <riggs@FreeBSD.org>
  *  Tilman Linneweh <arved@FreeBSD.org>
  *  Tim Bishop <tdb@FreeBSD.org>
  *  Timothy Beyer <beyert@cs.ucr.edu>
  *  Tobias Rehbein <tobias.rehbein@web.de>
  *  Tyler Spivey
  *  Ulrich Spoerlein <q@uni.de>
  *  Ulrich Spoerlein <uspoerlein@gmail.com>
  *  Vanilla I. Shu <vanilla@FreeBSD.org>
  *  Veniamin Gvozdikov <vg@FreeBSD.org>
  *  Vincent Tantardini <vinc@FreeBSD-fr.org>
  *  Wen Heping <wen@FreeBSD.org>
  *  Wen Heping <wenheping@gmail.com>
  *  Yanhui Shen <shen.elf@gmail.com>
  *  Yar Tikhiy <yar@FreeBSD.org>
  *  Yar Tikhiy <yar@comp.chem.msu.su>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  Yoichi Asai <yatt@luna2.org>
  *  Yoichi Asai <yatt@msc.biglobe.ne.jp>
  *  Yoshiaki Uchikawa
  *  Yoshihide SONODA <ysonoda@dontaku.csce.kyushu-u.ac.jp>
  *  Yuri Victorovich
  *  Yuri Victorovich <yuri@FreeBSD.org>
  *  Yuri Victorovich <yuri@rawbw.com>
  *  Zach Zurflu <zach@pabst.bendnet.com>
  *  Zane C. Bowers
  *  Zane C. Bowers-Hadley <vvelox@vvelox.net>
  *  Zhihao Yuan <lichray@gmail.com>
  *  ache
  *  arved
  *  chinsan
  *  chinsan <chinsan.tw@gmail.com>
  *  ericb@thedeepsky.com
  *  erich@FreeBSD.org
  *  faulkner@mpd.tandem.com
  *  gahr
  *  greg
  *  hrkfrd@googlemail.com
  *  ijliao
  *  janek@gaja.ipan.lublin.pl
  *  jkh
  *  jockl <jockl@pianojockl.org>
  *  kbyanc@posi.net
  *  kwm@rainbow-runner.nl
  *  lazyklimm <lazyklimm@gmail.com>
  *  leo
  *  lx
  *  mahonmesr@googlemail.com
  *  marius nuennerich
  *  mathias.picker@gmx.de
  *  michael johnson <ahze@ahze.net>
  *  michaelnottebrock@gmx.net and lioux@FreeBSD.org
  *  mtm@identd.net
  *  nemysis <nemysis@gmx.ch>
  *  nork@FreeBSD.org
  *  nox@jelal.kn-bremen.de
  *  numisemis at yahoo dot com
  *  patrick
  *  pjm <pierrejacqes.mimifir@gmail.com>
  *  pozar
  *  pst
  *  r.neese
  *  rene@FreeBSD.org (repocopied from audio/py-mpd)
  *  sethk
  *  shanee@augusta.de
  *  sobomax
  *  squell@alumina.nl
  *  swallace
  *  t.vanklaveren@student.utwente.nl
  *  torstenb
  *  trasz <trasz@FreeBSD.org
  *  trasz <trasz@pin.if.uz.zgora.pl>
  *  trevor
  *  ugen
  *  will
  *  yoshiaki Uchikawa

With hat:	portmgr
213b0b7a75
Mikael Urankar (mikael) · 1.0.25_6
*: Linux emulation: add support for aarch64

PR:		256008
Submitted by:	Vincent Milum Jr (prior version)
Approved by:	emulation (maintainer timeout)
c7dd5ca11a
Stefan Eßer (se) · 1.0.25_6
*/*: Remove redundant '-[0-9]*' from CONFLICTS

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".

Approved by:	portmgr (blanket)
819f25b36d
Bernhard Froehlich (decke) · 1.0.25_6
audio/linux-c7-libsndfile: Add CPE information

Approved by:    portmgr (blanket)
867dcb1f1c
Mathieu Arnold (mat) · 1.0.25_6
Remove # $FreeBSD$ from Makefiles.
305f148f48
Tijl Coosemans (tijl) · 1.0.25_6
Update Linux CentOS ports to 7.9.2009.
9aae2889e0
Tijl Coosemans (tijl) · 1.0.25_5
Add audio/linux-c7-gsm, required by audio/linux-c7-libsndfile.

Reported by:	Elijah Stone <elronnd@elronnd.net>
46af12750b
Tijl Coosemans (tijl) · 1.0.25_4
Update CentOS 7 ports to 7.8.2003.
f8c4d55478
Tijl Coosemans (tijl) · 1.0.25_3
Address some portlint warnings in the Linux infrastructure ports.

Eliminate LINUXNAME from port Makefiles.  This was just a helper variable
without special meaning outside port Makefiles but several developers have
copied it to new ports where it was then unused, apparently thinking that
it did have some special meaning.
bb5cf6c4f3
Tijl Coosemans (tijl) · 1.0.25_3
Eliminate RPMVERSION from Linux ports and set DISTVERSIONSUFFIX instead. This puts all version information together in the port Makefiles.
5b721b6172
Tobias Kortkamp (tobik) · 1.0.25_3
audio/linux-c7-*: Spell CONFLICTS correctly
93651a9964
Mathieu Arnold (mat) · 1.0.25_3
Add DOCS options to ports that should have one.

Also various fixes related to said option.

PR:		230864
Submitted by:	mat
exp-runs by:	antoine
e1bfdfbe56
Tijl Coosemans (tijl) · 1.0.25_3
Enable i386 support to Linux CentOS 7 ports.

PR:		216646
d0d15cc5cd
Tijl Coosemans (tijl) · 1.0.25_3
- Autodetect the installed linux_base port and use LINUX_DEFAULT only as   a last resort. - Construct a list of DISTFILES for every architecture (amd64, i386).   Select one list for regular make and all lists for make makesum so linux   ports can have one combined distinfo file. - Set DIST_SUBDIR?=centos so there's only one copy of common distfiles. - Use MASTER_SITES and DISTFILES groups so make
6140d3c6aa
Tijl Coosemans (tijl) · 1.0.25_2
Update Linux CentOS 7 ports to 7.3.1611.  While 7.2 had semi-official i386 packages there are no such packages for 7.3 yet so i386 support has been marked IGNORE for now.

Change DIST_SUBDIR to just "centos" so distfiles that remain the same
between major versions don't have to be redownloaded.

Remove fmake hacks from linux.mk.

Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
c2712d2471
Tijl Coosemans (tijl) · 1.0.25_1
Fix pkg-plist.
7e04ab58d3
Tijl Coosemans (tijl) · 1.0.25
Add Linux CentOS 7 infrastructure ports.

Mk/Uses/linux.mk changes:
- Add support for architecture neutral (noarch) distfiles.
- Add support for 64-bit only ports: set IGNORE on i386 and don't install
  32-bit compat libraries on amd64.

Submitted by:	Piotr Kubaj <pkubaj@anongoth.pl>
Differential Revision:	https://reviews.freebsd.org/D7886
1675ff649c