Stay Secure with the Latest Linux Advisories

security advisorycritical issueFedora

Fedora 29: 2019-b07291b757 Major: Libid3tag Memory Leak Concern

Security fix for CVE-2004-2779 and CVE-2017-11550. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-e06468b832 2018-04-09 19:08:06.183394 --------------------------------------------------------------------------------Name : libid3tag Product : Fedora 27 Version : 0.15.1b Release : 26.fc27 URL : http://www.underbit.com/products/mad/ Summary : ID3 tag manipulation library Description : libid3tag is a library for reading and (eventually) writing ID3 tags, both ID3v1 and the various versions of ID3v2. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2004-2779 and CVE-2017-11550 --------------------------------------------------------------------------------References: [ 1 ] Bug #1478934 - CVE-2017-11550 libid3tag: NULL Pointer Dereference in id3_ucs4_length function in ucs4.c https://bugzilla.redhat.com/show_bug.cgi?id=1478934 [ 2 ] Bug #1561983 - CVE-2004-2779 libid3tag: id3_utf16_deserialize() misparses ID3v2 tags with an odd number of bytes resulting in an endless loop https://bugzilla.redhat.com/show_bug.cgi?id=1561983 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade libid3tag' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Importantsecurity patch applied to libid3tag resolving severe vulnerabilities in metadata handling on Fedora 27, immediate updating advised.. libid3tag Security Fix, Fedora Update, Null Pointer Exploit. . Severity: Critical. LinuxSecurity.com Team

Apr 09, 2018 •Critical Fedora