The updated package fixes a security vulnerability: A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. (CVE-2019-18359) . MGASA-2020-0179 - Updated mp3gain packages fix security vulnerability Publication date: 24 Apr 2020 URL: https://advisories.mageia.org/MGASA-2020-0179.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-18359 The updated package fixes a security vulnerability: A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service. (CVE-2019-18359) References: - https://bugs.mageia.org/show_bug.cgi?id=26504 - - https://www.cve.org/CVERecord?id=CVE-2019-18359 SRPMS: - 7/core/mp3gain-1.6.2-2.1.mga7 . The latest Mageia mp3gain packages resolve a critical vulnerability leading to potential remote denial of service. Key patch specifics are detailed herein.. Mageia Security, MP3Gain Update, Package Vulnerability. . Severity: Critical. LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for mp3gain ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0539-1 Rating: moderate References: #1154971 Cross-References: CVE-2017-12911 CVE-2019-18359 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for mp3gain fixes the following issues: Update to version 1.6.2. - CVE-2019-18359: Fixed a buffer over-read was discovered in ReadMP3APETag (boo#1154971) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-539=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): mp3gain-1.6.2-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2017-12911.html https://www.suse.com/security/cve/CVE-2019-18359.html https://bugzilla.suse.com/1154971 -- . A critical patch for mp3gain has been released to fix multiple security issues in openSUSE environments.. openSUSE Update, mp3gain Security Fix, Linux Security Update. . LinuxSecurity.com Team
An update that fixes two vulnerabilities is now available. . openSUSE Security Update: Security update for mp3gain ______________________________________________________________________________ Announcement ID: openSUSE-SU-2020:0522-1 Rating: moderate References: #1154971 Cross-References: CVE-2017-12911 CVE-2019-18359 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for mp3gain fixes the following issues: Update to version 1.6.2. - CVE-2019-18359: Fixed a buffer over-read was discovered in ReadMP3APETag (boo#1154971) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-522=1 Package List: - openSUSE Leap 15.1 (x86_64): mp3gain-1.6.2-lp151.3.3.1 mp3gain-debuginfo-1.6.2-lp151.3.3.1 mp3gain-debugsource-1.6.2-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2017-12911.html https://www.suse.com/security/cve/CVE-2019-18359.html https://bugzilla.suse.com/1154971 -- . Protection improvement release for openSUSE Leap 15.1 mp3gain resolves various vulnerabilities and boosts security measures.. openSUSE Security, mp3gain Update, buffer over-read Fix, moderate Threat. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.