Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Stay Secure with the Latest Linux Advisories

Filter Icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -2 articles for you...
89

Fedora 34: 2021-28b495e9e0 moderate: libmysofa buffer overflows

various smaller security bug fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-28b495e9e0 2021-12-16 01:11:58.361704 --------------------------------------------------------------------------------Name : libmysofa Product : Fedora 34 Version : 1.2.1 Release : 1.fc34 URL : https://github.com/hoene/libmysofa Summary : C functions for reading HRTFs Description : This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard. --------------------------------------------------------------------------------Update Information: various smaller security bug fixes --------------------------------------------------------------------------------ChangeLog: * Mon Dec 6 2021 Nicolas Chauvet - 1.2.1-1 - Update to 1.2.1 * Thu Jul 22 2021 Fedora Release Engineering - 1.2-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1935083 - CVE-2020-6860 libmysofa: stack-based buffer overflow in readDataVar in hdf/dataobject.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1935083 [ 2 ] Bug #2019194 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019194 [ 3 ] Bug #2019195 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019195 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-28b495e9e0' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . The latest Fedora release tackles multiple vulnerabilities in libmysofa, enhancing both the security and reliability of the operating system.. Fedora Libmysofa Security Update, Buffer Overflow Fix, Security Notification. . LinuxSecurity.com Team

Calendar 2 Dec 15, 2021 Fedora
89

Fedora 35 Update: FEDORA-2021-36ac17e5ac High: libmysofa Buffer Overflow

various smaller security bug fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-36ac17e5ac 2021-12-10 01:20:40.648541 --------------------------------------------------------------------------------Name : libmysofa Product : Fedora 35 Version : 1.2.1 Release : 1.fc35 URL : https://github.com/hoene/libmysofa Summary : C functions for reading HRTFs Description : This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard. --------------------------------------------------------------------------------Update Information: various smaller security bug fixes --------------------------------------------------------------------------------ChangeLog: * Mon Dec 6 2021 Nicolas Chauvet - 1.2.1-1 - Update to 1.2.1 --------------------------------------------------------------------------------References: [ 1 ] Bug #1935083 - CVE-2020-6860 libmysofa: stack-based buffer overflow in readDataVar in hdf/dataobject.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1935083 [ 2 ] Bug #2019194 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019194 [ 3 ] Bug #2019195 - CVE-2021-3756 libmysofa: heap-based buffer overflow in loudness(), mysofa_check() and readOHDRHeaderMessageDataLayout() [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=2019195 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-36ac17e5ac' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details onthe GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . This patch resolves multiple vulnerabilities in libmysofa, particularly serious buffer overflow concerns.. Fedora 35 Update, libmysofa Security, Software Vulnerability Management. . LinuxSecurity.com Team

Calendar 2 Dec 09, 2021 Fedora
202

openSUSE: 2021:0459-1 Moderate: Libmysofa Security Update

An update that fixes 13 vulnerabilities is now available. . openSUSE Security Update: Security update for libmysofa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0459-1 Rating: moderate References: #1149919 #1149920 #1149922 #1149924 #1149926 #1159839 #1160040 #1181977 #1181978 #1181979 #1181980 #1181981 #1182883 Cross-References: CVE-2019-16091 CVE-2019-16092 CVE-2019-16093 CVE-2019-16094 CVE-2019-16095 CVE-2019-20016 CVE-2019-20063 CVE-2020-36148 CVE-2020-36149 CVE-2020-36150 CVE-2020-36151 CVE-2020-36152 CVE-2020-6860 CVSS scores: CVE-2019-16091 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16092 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16093 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16094 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16095 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-20016 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-20063 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36148 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36149 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36150 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36151 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36152 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-6860 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE BackportsSLE-15-SP2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for libmysofa fixes the following issues: - Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883 Update to version 0.9.1 * Extended angular neighbor search to 'close the sphere' * Added and exposed mysofa_getfilter_float_nointerp method * Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040 This update was imported from the openSUSE:Leap:15.2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP2: zypper in -t patch openSUSE-2021-459=1 Package List: - openSUSE Backports SLE-15-SP2 (aarch64 ppc64le s390x x86_64): libmysofa-devel-0.9.1-bp152.4.3.1 libmysofa0-0.9.1-bp152.4.3.1 - openSUSE Backports SLE-15-SP2 (aarch64_ilp32): libmysofa0-64bit-0.9.1-bp152.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-16091.html https://www.suse.com/security/cve/CVE-2019-16092.html https://www.suse.com/security/cve/CVE-2019-16093.html https://www.suse.com/security/cve/CVE-2019-16094.html https://www.suse.com/security/cve/CVE-2019-16095.html https://www.suse.com/security/cve/CVE-2019-20016.html https://www.suse.com/security/cve/CVE-2019-20063.html https://www.suse.com/security/cve/CVE-2020-36148.html https://www.suse.com/security/cve/CVE-2020-36149.html https://www.suse.com/security/cve/CVE-2020-36150.html https://www.suse.com/security/cve/CVE-2020-36151.html https://www.suse.com/security/cve/CVE-2020-36152.html https://www.suse.com/security/cve/CVE-2020-6860.html https://bugzilla.suse.com/1149919 https://bugzilla.suse.com/1149920 https://bugzilla.suse.com/1149922 https://bugzilla.suse.com/1149924 https://bugzilla.suse.com/1149926 https://bugzilla.suse.com/1159839 https://bugzilla.suse.com/1160040 https://bugzilla.suse.com/1181977 https://bugzilla.suse.com/1181978 https://bugzilla.suse.com/1181979 https://bugzilla.suse.com/1181980 https://bugzilla.suse.com/1181981 https://bugzilla.suse.com/1182883 . A recent patch for libmysofa resolves 13 vulnerabilities in openSUSE Backports, improving overall system security.. openSUSE Security Patch, libmysofa Update, Backports Security Fix, Moderate Threat Addressed. . LinuxSecurity.com Team

Calendar 2 Mar 21, 2021 OpenSUSE
202

openSUSE Leap 15.2: 2021-0444-1 Moderate: libmysofa Security Risk

An update that fixes 13 vulnerabilities is now available. . openSUSE Security Update: Security update for libmysofa ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:0444-1 Rating: moderate References: #1149919 #1149920 #1149922 #1149924 #1149926 #1159839 #1160040 #1181977 #1181978 #1181979 #1181980 #1181981 #1182883 Cross-References: CVE-2019-16091 CVE-2019-16092 CVE-2019-16093 CVE-2019-16094 CVE-2019-16095 CVE-2019-20016 CVE-2019-20063 CVE-2020-36148 CVE-2020-36149 CVE-2020-36150 CVE-2020-36151 CVE-2020-36152 CVE-2020-6860 CVSS scores: CVE-2019-16091 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16092 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16093 (NVD) : 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-16094 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-16095 (NVD) : 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-20016 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2019-20063 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-36148 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36149 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36150 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36151 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-36152 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2020-6860 (NVD) : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap15.2 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for libmysofa fixes the following issues: - Added security backports: gh#hoene/libmysofa#136 - CVE-2020-36152 - boo#1181977 gh#hoene/libmysofa#138 - CVE-2020-36148 - boo#1181981 gh#hoene/libmysofa#137 - CVE-2020-36149 - boo#1181980 gh#hoene/libmysofa#134 - CVE-2020-36151 - boo#1181978 gh#hoene/libmysofa#135 - CVE-2020-36150 - boo#1181979 gh#hoene/libmysofa#96 - CVE-2020-6860 - boo#1182883 Update to version 0.9.1 * Extended angular neighbor search to 'close the sphere' * Added and exposed mysofa_getfilter_float_nointerp method * Fixed various security issues CVE-2019-16091 - boo#1149919 CVE-2019-16092 - boo#1149920 CVE-2019-16093 - boo#1149922 CVE-2019-16094 - boo#1149924 CVE-2019-16095 - boo#1149926 CVE-2019-20016 - boo#1159839 CVE-2019-20063 - boo#1160040 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2021-444=1 Package List: - openSUSE Leap 15.2 (x86_64): libmysofa-debugsource-0.9.1-lp152.3.3.1 libmysofa-devel-0.9.1-lp152.3.3.1 libmysofa0-0.9.1-lp152.3.3.1 libmysofa0-debuginfo-0.9.1-lp152.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-16091.html https://www.suse.com/security/cve/CVE-2019-16092.html https://www.suse.com/security/cve/CVE-2019-16093.html https://www.suse.com/security/cve/CVE-2019-16094.html https://www.suse.com/security/cve/CVE-2019-16095.html https://www.suse.com/security/cve/CVE-2019-20016.html https://www.suse.com/security/cve/CVE-2019-20063.html https://www.suse.com/security/cve/CVE-2020-36148.html https://www.suse.com/security/cve/CVE-2020-36149.html https://www.suse.com/security/cve/CVE-2020-36150.html https://www.suse.com/security/cve/CVE-2020-36151.html https://www.suse.com/security/cve/CVE-2020-36152.html https://www.suse.com/security/cve/CVE-2020-6860.html https://bugzilla.suse.com/1149919 https://bugzilla.suse.com/1149920 https://bugzilla.suse.com/1149922 https://bugzilla.suse.com/1149924 https://bugzilla.suse.com/1149926 https://bugzilla.suse.com/1159839 https://bugzilla.suse.com/1160040 https://bugzilla.suse.com/1181977 https://bugzilla.suse.com/1181978 https://bugzilla.suse.com/1181979 https://bugzilla.suse.com/1181980 https://bugzilla.suse.com/1181981 https://bugzilla.suse.com/1182883 . The latest openSUSE Security Update for libmysofa addresses 13 vulnerabilities classified as moderate risks. Discover more about how updates are managed.. openSUSE Update, libmysofa Security, Moderate Threat Fixes. . LinuxSecurity.com Team

Calendar 2 Mar 18, 2021 OpenSUSE
89

Fedora 32: 2021-4e40ccb5e6 Critical Update: Libmysofa Input Errors

Fixes various security issues by upgrading to the current 1.2 version.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-4e40ccb5e6 2021-02-26 01:08:09.396821 --------------------------------------------------------------------------------Name : libmysofa Product : Fedora 32 Version : 1.2 Release : 4.fc32 URL : https://github.com/hoene/libmysofa Summary : C functions for reading HRTFs Description : This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard. --------------------------------------------------------------------------------Update Information: Fixes various security issues by upgrading to the current 1.2 version. --------------------------------------------------------------------------------ChangeLog: * Mon Feb 8 2021 Nicolas Chauvet - 1.2-4 - Update to 1.2 * Tue Jan 26 2021 Fedora Release Engineering - 1.1-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild * Sat Aug 1 2020 Fedora Release Engineering - 1.1-3 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Tue Jul 28 2020 Fedora Release Engineering - 1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1928824 - CVE-2020-36152 libmysofa: Buffer overflow in readDataVar in hdf/dataobject.c [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928824 [ 2 ] Bug #1928825 - CVE-2020-36152 libmysofa: Buffer overflow in readDataVar in hdf/dataobject.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928825 [ 3 ] Bug #1928826 - CVE-2020-36151 libmysofa: Incorrect handling of input data in mysofa_resampler_reset_mem function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928826 [ 4 ] Bug #1928827 -CVE-2020-36151 libmysofa: Incorrect handling of input data in mysofa_resampler_reset_mem function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928827 [ 5 ] Bug #1928829 - CVE-2020-36150 libmysofa: Incorrect handling of input data in loudness function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928829 [ 6 ] Bug #1928830 - CVE-2020-36150 libmysofa: Incorrect handling of input data in loudness function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928830 [ 7 ] Bug #1928833 - CVE-2020-36148 libmysofa: Incorrect handling of input data in verifyAttribute function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928833 [ 8 ] Bug #1928834 - CVE-2020-36148 libmysofa: Incorrect handling of input data in verifyAttribute function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928834 [ 9 ] Bug #1928835 - CVE-2020-36149 libmysofa: Incorrect handling of input data in changeAttribute function [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928835 [ 10 ] Bug #1928836 - CVE-2020-36149 libmysofa: Incorrect handling of input data in changeAttribute function [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1928836 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-4e40ccb5e6' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Patch resolves vulnerabilities in libmyapp. Urgent fixes for Fedora 34 targeting data processing flaws.. Fedora 32, Libmysofa, Critical Update, Input Handling Errors. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Feb 25, 2021 Critical Fedora
172

Ubuntu 18.04 LTS USN-4473-1 Critical: Libmysofa Input Handling Issue

Several security issues were fixed in libmysofa.. =========================================================================Ubuntu Security Notice USN-4473-1 August 26, 2020 libmysofa vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Several security issues were fixed in libmysofa. Software Description: - libmysofa: library to read HRTFs stored in the AES69-2015 SOFA format Details: It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: libmysofa0 0.6~dfsg0-3+deb10u1build1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4473-1 CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095 Package Information: https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-3+deb10u1build1 . Several vulnerabilities have been identified in libmysofa, posing security threats to Ubuntu 18.04. It is advisable to implement updates to ensure system protection.. libmysofa vulnerabilities, Ubuntu security notice, Denial of Service risks. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Aug 26, 2020 Critical Ubuntu
172

Ubuntu 4033-1: Crash Vulnerability Found in libmysofa Library

libmysofa could be made to crash if it received specially crafted input.. =========================================================================Ubuntu Security Notice USN-4033-1 June 24, 2019 libmysofa vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 19.04 - Ubuntu 18.10 - Ubuntu 18.04 LTS Summary: libmysofa could be made to crash if it received specially crafted input. Software Description: - libmysofa: library to read HRTFs stored in the AES69-2015 SOFA format Details: It was discovered that a libmysofa component does not properly validate multiplications and additions, and may crash with some specific input. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04: libmysofa0 0.6~dfsg0-2ubuntu0.19.04.1 Ubuntu 18.10: libmysofa0 0.6~dfsg0-2ubuntu0.18.10.1 Ubuntu 18.04 LTS: libmysofa0 0.6~dfsg0-2ubuntu0.18.04.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-4033-1 CVE-2019-10672 Package Information: https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.19.04.1 https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.18.10.1 https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.18.04.1 . The libmysofa flaw poses a risk of system disruptions due to maliciously designed input on Ubuntu platforms. Users are advised to apply updates for the impacted versions.. libmysofa, security, ubuntu, crash, input. . Severity: Critical. LinuxSecurity.com Team

Calendar 2 Jun 24, 2019 Critical Ubuntu
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

What got you started with Linux?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/150-what-got-you-started-with-linux?task=poll.vote&format=json
150
radio
0
[{"id":483,"title":"Self-taught through trial and error","votes":545,"type":"x","order":1,"pct":78.42,"resources":[]},{"id":484,"title":"Formal training or courses","votes":30,"type":"x","order":2,"pct":4.32,"resources":[]},{"id":485,"title":"A job that required it","votes":34,"type":"x","order":3,"pct":4.89,"resources":[]},{"id":486,"title":"Other","votes":86,"type":"x","order":4,"pct":12.37,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Your message here