Stay Secure with the Latest Linux Advisories

security advisorybuffer overflowFedora

Fedora 26: 2018-b26768593c Critical: SoX Buffer Overflow Fix

Security fix for **CVE-2017-15370** and **CVE-2017-15371**. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-b26768593c 2018-01-23 21:16:49.690488 --------------------------------------------------------------------------------Name : sox Product : Fedora 26 Version : 14.4.2.0 Release : 14.fc26 URL : https://sourceforge.net/projects/sox/ Summary : A general purpose sound file conversion tool Description : SoX (Sound eXchange) is a sound file format converter SoX can convert between many different digitized sound formats and perform simple sound manipulation functions, including sound effects. --------------------------------------------------------------------------------Update Information: Security fix for **CVE-2017-15370** and **CVE-2017-15371** --------------------------------------------------------------------------------References: [ 1 ] Bug #1510918 - CVE-2017-15371 sox: Reachable assertion abort in the function sox_append_comment() https://bugzilla.redhat.com/show_bug.cgi?id=1510918 [ 2 ] Bug #1510917 - CVE-2017-15370 sox: Heap-based buffer overflow in the ImaExpandS function https://bugzilla.redhat.com/show_bug.cgi?id=1510917 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade sox' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email This email address is being protected from spambots. You need JavaScript enabled to view it. . A security patch for libc tackles memory corruption vulnerabilities on Debian 9, enhancing system integrity and protection.. Fedora Security,Sox Update,Buffer Overflow,Sound File Tool. . Severity: Critical. LinuxSecurity.com Team

Jan 23, 2018 •Critical Fedora