Описание
Security update for aubio
This update for aubio fixes the following issues:
- CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359)
- CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364)
Список пакетов
openSUSE Leap 42.3
aubio-0.4.1-9.9.1
aubio-tools-0.4.1-9.9.1
libaubio-devel-0.4.1-9.9.1
libaubio4-0.4.1-9.9.1
libaubio4-32bit-0.4.1-9.9.1
Ссылки
- E-Mail link for openSUSE-SU-2018:2343-1
- SUSE Security Ratings
Описание
An issue was discovered in aubio 0.4.6. A SEGV signal can occur in aubio_pitch_set_unit in pitch/pitch.c, as demonstrated by aubionotes.
Затронутые продукты
openSUSE Leap 42.3:aubio-0.4.1-9.9.1
openSUSE Leap 42.3:aubio-tools-0.4.1-9.9.1
openSUSE Leap 42.3:libaubio-devel-0.4.1-9.9.1
openSUSE Leap 42.3:libaubio4-0.4.1-9.9.1
Ссылки
- CVE-2018-14522
- SUSE Bug 1102359
Описание
An issue was discovered in aubio 0.4.6. A buffer over-read can occur in new_aubio_pitchyinfft in pitch/pitchyinfft.c, as demonstrated by aubionotes.
Затронутые продукты
openSUSE Leap 42.3:aubio-0.4.1-9.9.1
openSUSE Leap 42.3:aubio-tools-0.4.1-9.9.1
openSUSE Leap 42.3:libaubio-devel-0.4.1-9.9.1
openSUSE Leap 42.3:libaubio4-0.4.1-9.9.1
Ссылки
- CVE-2018-14523
- SUSE Bug 1102364