Stay Secure with the Latest Linux Advisories

security advisoryfedorabuffer overflow

Fedora 30: FEDORA-2019-00ca0acb47 Critical: aubio Security Fix

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-00ca0acb47 2019-08-12 01:00:55.517395 --------------------------------------------------------------------------------Name : aubio Product : Fedora 30 Version : 0.4.9 Release : 1.fc30 URL : https://aubio.org/ Summary : An audio labeling library Description : aubio is a library for audio labeling. Its features include segmenting a sound file before each of its attacks, performing pitch detection, tapping the beat and producing midi streams from live audio. The name aubio comes from 'audio' with a typo: several transcription errors are likely to be found in the results too. The aim of this project is to provide these automatic labeling features to other audio software. Functions can be used offline in sound editors and software samplers, or online in audio effects and virtual instruments. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802 --------------------------------------------------------------------------------ChangeLog: * Thu Aug 1 2019 Guido Aulisi - 0.4.9-1 - Update to 0.4.9 - Some spec cleanup - CVE-2018-19800 prevent a possible buffer overflow in new_aubio_tempo - CVE-2018-19801 prevent a null-pointer dereference in new_aubio_filterbank - CVE-2018-19802 prevent a null-pointer dereference in new_aubio_onset --------------------------------------------------------------------------------References: [ 1 ] Bug #1735586 - CVE-2019-1010224 aubio: null pointer dereference in component onset https://bugzilla.redhat.com/show_bug.cgi?id=1735586 [ 2 ] Bug #1735588 - CVE-2019-1010223 aubio: buffer overflow in component tempo https://bugzilla.redhat.com/show_bug.cgi?id=1735588 [ 3 ] Bug #1735591 - CVE-2019-1010222 aubio: nullpointer dereference in component filterbank https://bugzilla.redhat.com/show_bug.cgi?id=1735591 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-00ca0acb47' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . Urgent security patch for Fedora 30's aubio addressing vulnerabilities related to buffer overflow and null-pointer dereferencing.. Fedora Security Update, Aubio Library, Buffer Overflow Fix, Null Pointer Issue. . Severity: Critical. LinuxSecurity.com Team

Aug 11, 2019 •Critical Fedora