The Audio File library is an implementation of the Audio File Library from SGI, which provides an API for accessing audio file formats like AIFF/AIFF-C, WAVE, and NeXT/Sun .snd/.au files. Security Fix: * audiofile: Heap-based buffer overflow in Expand3To4Module::run when running sfconvert * audiofile: NULL pointer dereference in ModuleState::setup in modules/ModuleState.cpp allows for denial of service via crafted file For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.