various smaller security bug fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-28b495e9e0 2021-12-16 01:11:58.361704 --------------------------------------------------------------------------------Name : libmysofa Product : Fedora 34 Version : 1.2.1 Release : 1.fc34 URL : https://github.com/hoene/libmysofa Summary : C functions for reading HRTFs Description : This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard. --------------------------------------------------------------------------------Update Information: various smaller security bug fixes --------------------------------------------------------------------------------ChangeLog: * Mon Dec 6 2021 Nicolas Chauvet - 1.2.1-1 - Update to 1.2.1 * Thu Jul 22 2021 Fedora Release Engineering - 1.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1935083 - CVE-2020-6860 libmysofa: stack-based buffer overflow in readDataVar in hdf/dataobject.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1935083 [ 2 ] Bug #2019194 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019194 [ 3 ] Bug #2019195 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019195 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-28b495e9e0' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
various smaller security bug fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-36ac17e5ac 2021-12-10 01:20:40.648541 --------------------------------------------------------------------------------Name : libmysofa Product : Fedora 35 Version : 1.2.1 Release : 1.fc35 URL : https://github.com/hoene/libmysofa Summary : C functions for reading HRTFs Description : This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard. --------------------------------------------------------------------------------Update Information: various smaller security bug fixes --------------------------------------------------------------------------------ChangeLog: * Mon Dec 6 2021 Nicolas Chauvet - 1.2.1-1 - Update to 1.2.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #1935083 - CVE-2020-6860 libmysofa: stack-based buffer overflow in readDataVar in hdf/dataobject.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1935083 [ 2 ] Bug #2019194 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019194 [ 3 ] Bug #2019195 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019195 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-36ac17e5ac' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
An update that fixes 13 vulnerabilities is now available. . openSUSE Security Update: Security update for libmysofa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0459-1 Rating: moderate References: #1149919 #1149920 #1149922 #1149924 #1149926 #1159839 #1160040 #1181977 #1181978 #1181979 #1181980 #1181981 #1182883 Cross-References: CVE-2019-16091 CVE-2019-16092 CVE-2019-16093 CVE-2019-16094 CVE-2019-16095 CVE-2019-20016 CVE-2019-20063 CVE-2020-36148 CVE-2020-36149 CVE-2020-36150 CVE-2020-36151 CVE-2020-36152 CVE-2020-6860 CVSS scores: CVE-2019-16091 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16092 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16093 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16094 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16095 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-20016 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-20063 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36148 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36149 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36150 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36151 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36152 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-6860 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE BackportsSLE-15-SP2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for libmysofa fixes the following issues: - Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883 Update to version 0.9.1 * Extended angular neighbor search to 'close the sphere' * Added and exposed mysofa_getfilter_float_nointerp method * Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-459=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): libmysofa-devel-0.9.1-bp152.4.3.1 libmysofa0-0.9.1-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): libmysofa0-64bit-0.9.1-bp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-16091.html https://www.suse.com/security/cve/CVE-2019-16092.html https://www.suse.com/security/cve/CVE-2019-16093.html https://www.suse.com/security/cve/CVE-2019-16094.html https://www.suse.com/security/cve/CVE-2019-16095.html https://www.suse.com/security/cve/CVE-2019-20016.html https://www.suse.com/security/cve/CVE-2019-20063.html https://www.suse.com/security/cve/CVE-2020-36148.html https://www.suse.com/security/cve/CVE-2020-36149.html https://www.suse.com/security/cve/CVE-2020-36150.html https://www.suse.com/security/cve/CVE-2020-36151.html https://www.suse.com/security/cve/CVE-2020-36152.html https://www.suse.com/security/cve/CVE-2020-6860.html https://bugzilla.suse.com/1149919 https://bugzilla.suse.com/1149920 https://bugzilla.suse.com/1149922 https://bugzilla.suse.com/1149924 https://bugzilla.suse.com/1149926 https://bugzilla.suse.com/1159839 https://bugzilla.suse.com/1160040 https://bugzilla.suse.com/1181977 https://bugzilla.suse.com/1181978 https://bugzilla.suse.com/1181979 https://bugzilla.suse.com/1181980 https://bugzilla.suse.com/1181981 https://bugzilla.suse.com/1182883 . A recent patch for libmysofa resolves 13 vulnerabilities in openSUSE Backports, improving overall system security.. openSUSE Security Patch, libmysofa Update, Backports Security Fix, Moderate Threat Addressed. . LinuxSecurity.com Team
An update that fixes 13 vulnerabilities is now available. . openSUSE Security Update: Security update for libmysofa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0444-1 Rating: moderate References: #1149919 #1149920 #1149922 #1149924 #1149926 #1159839 #1160040 #1181977 #1181978 #1181979 #1181980 #1181981 #1182883 Cross-References: CVE-2019-16091 CVE-2019-16092 CVE-2019-16093 CVE-2019-16094 CVE-2019-16095 CVE-2019-20016 CVE-2019-20063 CVE-2020-36148 CVE-2020-36149 CVE-2020-36150 CVE-2020-36151 CVE-2020-36152 CVE-2020-6860 CVSS scores: CVE-2019-16091 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16092 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16093 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16094 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16095 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-20016 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-20063 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36148 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36149 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36150 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36151 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36152 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-6860 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap15.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for libmysofa fixes the following issues: - Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883 Update to version 0.9.1 * Extended angular neighbor search to 'close the sphere' * Added and exposed mysofa_getfilter_float_nointerp method * Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-444=1 Package List: - openSUSE Leap 15.2 (x86_64): libmysofa-debugsource-0.9.1-lp152.3.3.1 libmysofa-devel-0.9.1-lp152.3.3.1 libmysofa0-0.9.1-lp152.3.3.1 libmysofa0-debuginfo-0.9.1-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16091.html https://www.suse.com/security/cve/CVE-2019-16092.html https://www.suse.com/security/cve/CVE-2019-16093.html https://www.suse.com/security/cve/CVE-2019-16094.html https://www.suse.com/security/cve/CVE-2019-16095.html https://www.suse.com/security/cve/CVE-2019-20016.html https://www.suse.com/security/cve/CVE-2019-20063.html https://www.suse.com/security/cve/CVE-2020-36148.html https://www.suse.com/security/cve/CVE-2020-36149.html https://www.suse.com/security/cve/CVE-2020-36150.html https://www.suse.com/security/cve/CVE-2020-36151.html https://www.suse.com/security/cve/CVE-2020-36152.html https://www.suse.com/security/cve/CVE-2020-6860.html https://bugzilla.suse.com/1149919 https://bugzilla.suse.com/1149920 https://bugzilla.suse.com/1149922 https://bugzilla.suse.com/1149924 https://bugzilla.suse.com/1149926 https://bugzilla.suse.com/1159839 https://bugzilla.suse.com/1160040 https://bugzilla.suse.com/1181977 https://bugzilla.suse.com/1181978 https://bugzilla.suse.com/1181979 https://bugzilla.suse.com/1181980 https://bugzilla.suse.com/1181981 https://bugzilla.suse.com/1182883 . The latest openSUSE Security Update for libmysofa addresses 13 vulnerabilities classified as moderate risks. Discover more about how updates are managed.. openSUSE Update, libmysofa Security, Moderate Threat Fixes. . LinuxSecurity.com Team
Fixes various security issues by upgrading to the current 1.2 version.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-4e40ccb5e6 2021-02-26 01:08:09.396821 --------------------------------------------------------------------------------Name : libmysofa Product : Fedora 32 Version : 1.2 Release : 4.fc32 URL : https://github.com/hoene/libmysofa Summary : C functions for reading HRTFs Description : This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard. --------------------------------------------------------------------------------Update Information: Fixes various security issues by upgrading to the current 1.2 version. --------------------------------------------------------------------------------ChangeLog: * Mon Feb 8 2021 Nicolas Chauvet - 1.2-4 - Update to 1.2 * Tue Jan 26 2021 Fedora Release Engineering - 1.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Aug 1 2020 Fedora Release Engineering - 1.1-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1928824 - CVE-2020-36152 libmysofa: Buffer overflow in readDataVar in hdf/dataobject.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928824 [ 2 ] Bug #1928825 - CVE-2020-36152 libmysofa: Buffer overflow in readDataVar in hdf/dataobject.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928825 [ 3 ] Bug #1928826 - CVE-2020-36151 libmysofa: Incorrect handling of input data in mysofa_resampler_reset_mem function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928826 [ 4 ] Bug #1928827 -CVE-2020-36151 libmysofa: Incorrect handling of input data in mysofa_resampler_reset_mem function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928827 [ 5 ] Bug #1928829 - CVE-2020-36150 libmysofa: Incorrect handling of input data in loudness function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928829 [ 6 ] Bug #1928830 - CVE-2020-36150 libmysofa: Incorrect handling of input data in loudness function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928830 [ 7 ] Bug #1928833 - CVE-2020-36148 libmysofa: Incorrect handling of input data in verifyAttribute function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928833 [ 8 ] Bug #1928834 - CVE-2020-36148 libmysofa: Incorrect handling of input data in verifyAttribute function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928834 [ 9 ] Bug #1928835 - CVE-2020-36149 libmysofa: Incorrect handling of input data in changeAttribute function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928835 [ 10 ] Bug #1928836 - CVE-2020-36149 libmysofa: Incorrect handling of input data in changeAttribute function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928836 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-4e40ccb5e6' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Several security issues were fixed in libmysofa.. =========================================================================Ubuntu Security Notice USN-4473-1 August 26, 2020 libmysofa vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Several security issues were fixed in libmysofa. Software Description: - libmysofa: library to read HRTFs stored in the AES69-2015 SOFA format Details: It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libmysofa0 0.6~dfsg0-3+deb10u1build1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4473-1 CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095 Package Information: https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-3+deb10u1build1 . Several vulnerabilities have been identified in libmysofa, posing security threats to Ubuntu 18.04. It is advisable to implement updates to ensure system protection.. libmysofa vulnerabilities, Ubuntu security notice, Denial of Service risks. . Severity: Critical. LinuxSecurity.com Team
libmysofa could be made to crash if it received specially crafted input.. =========================================================================Ubuntu Security Notice USN-4033-1 June 24, 2019 libmysofa vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.10 - Ubuntu 18.04 LTS Summary: libmysofa could be made to crash if it received specially crafted input. Software Description: - libmysofa: library to read HRTFs stored in the AES69-2015 SOFA format Details: It was discovered that a libmysofa component does not properly validate multiplications and additions, and may crash with some specific input. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: libmysofa0 0.6~dfsg0-2ubuntu0.19.04.1 Ubuntu 18.10: libmysofa0 0.6~dfsg0-2ubuntu0.18.10.1 Ubuntu 18.04 LTS: libmysofa0 0.6~dfsg0-2ubuntu0.18.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4033-1 CVE-2019-10672 Package Information: https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.19.04.1 https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.18.10.1 https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.18.04.1 . The libmysofa flaw poses a risk of system disruptions due to maliciously designed input on Ubuntu platforms. Users are advised to apply updates for the impacted versions.. libmysofa, security, ubuntu, crash, input. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.