Stay Secure with the Latest Linux Advisories

security advisoryfedorasoftware patch

Fedora 28 Advisory: Timidity++ Security Patch for MIDI Handling Issues

- Security fix for [CVE-2017-11546, CVE-2017-11547] - Fix the .desktop files so that opening a .mid file from a GUI filemanager works. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-7c2e288c5f 2018-06-20 14:46:13.329376 --------------------------------------------------------------------------------Name : timidity++ Product : Fedora 28 Version : 2.14.0 Release : 16.fc28 URL : Summary : A software wavetable MIDI synthesizer Description : TiMidity++ is a MIDI format to wave table format converter and player. Install timidity++ if you'd like to play MIDI files and your sound card does not natively support wave table format. --------------------------------------------------------------------------------Update Information: - Security fix for [CVE-2017-11546, CVE-2017-11547] - Fix the .desktop files so that opening a .mid file from a GUI filemanager works --------------------------------------------------------------------------------ChangeLog: * Mon Jun 11 2018 Hans de Goede - 2.14.0-16 - Fix CVE-2017-11546 CVE-2017-11547 (rhbz#1480639) - Fix the .desktop files so that opening a .mid file from a GUI filemanager works (rhbz#1541182) --------------------------------------------------------------------------------References: [ 1 ] Bug #1541182 - timidity++-GTK-interface has bad timidity.desktop file https://bugzilla.redhat.com/show_bug.cgi?id=1541182 [ 2 ] Bug #1480639 - CVE-2017-11546 CVE-2017-11547 CVE-2017-11549 timidity++: ,CVE-2017-11546,CVE-2017-11549 TiMidity++: Multiple vulnerabilities [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1480639 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-7c2e288c5f' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/AYEUMI7QRKEK6U76UT7GXM5NIOQ7ZPLZ/ . A new security patch for Timidity++ in Fedora 28 addresses urgent vulnerabilities related to MIDI file processing and desktop file implementation.. Timidity++ Security Patch, Fedora 28 Update, MIDI File Handling Issues. . Severity: Important. LinuxSecurity.com Team

Jun 20, 2018 •Important Fedora