Fedora 29: FEDORA-2019-b1157fdfdc Critical: aubio Buffer Overflow Fix

aubio is a library for audio labeling. Its features include

segmenting a sound file before each of its attacks, performing pitch

detection, tapping the beat and producing midi streams from live

audio. The name aubio comes from 'audio' with a typo: several

transcription errors are likely to be found in the results too.

The aim of this project is to provide these automatic labeling

features to other audio software. Functions can be used offline in

sound editors and software samplers, or online in audio effects and

virtual instruments.

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802

* Thu Aug 1 2019 Guido Aulisi - 0.4.9-1

- Update to 0.4.9

- Some spec cleanup

- CVE-2018-19800 prevent a possible buffer overflow in new_aubio_tempo

- CVE-2018-19801 prevent a null-pointer dereference in new_aubio_filterbank

- CVE-2018-19802 prevent a null-pointer dereference in new_aubio_onset

[ 1 ] Bug #1735586 - CVE-2019-1010224 aubio: null pointer dereference in component onset

https://bugzilla.redhat.com/show_bug.cgi?id=1735586

[ 2 ] Bug #1735588 - CVE-2019-1010223 aubio: buffer overflow in component tempo

https://bugzilla.redhat.com/show_bug.cgi?id=1735588

[ 3 ] Bug #1735591 - CVE-2019-1010222 aubio: null pointer dereference in component filterbank

https://bugzilla.redhat.com/show_bug.cgi?id=1735591

su -c 'dnf upgrade --advisory FEDORA-2019-b1157fdfdc' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/