Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Mageia 6: MGASA-2018-0462 Moderate: Soundtouch Heap Corruption Fix

mageia
Calendar Grey November 20, 2018
Dist Mageia Esm H88
Recent updates to the soundtouch packages in Mageia address multiple security vulnerabilities, such as assertion failures and heap memory corruptions.
Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096)

Summary

Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096). Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097). Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098).

References

- https://bugs.mageia.org/show_bug.cgi?id=23823

- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-17096

- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-17097

- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-17098

- https://www.cve.org/CVERecord?id=CVE-2018-17096

- https://www.cve.org/CVERecord?id=CVE-2018-17097

- https://www.cve.org/CVERecord?id=CVE-2018-17098

Resolution

SRPMS

- 6/core/soundtouch-2.1.1-1.mga6

Publication date: 20 Nov 2018
URL: https://advisories.mageia.org/MGASA-2018-0462.html
Type: security
CVE: CVE-2018-17096, CVE-2018-17097, CVE-2018-17098

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here