Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in aubio
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in aubio
ID: FEDORA-2019-b1157fdfdc
Distribution: Fedora
Plattformen: Fedora 29
Datum: Mo, 12. August 2019, 07:27
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010223
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19802
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19800
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19801
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010224
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010222
Applikationen: aubio

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2019-b1157fdfdc
2019-08-12 01:39:02.163196
-------------------------------------------------------------------------------
-

Name : aubio
Product : Fedora 29
Version : 0.4.9
Release : 1.fc29
URL : http://aubio.org/
Summary : An audio labeling library
Description :
aubio is a library for audio labeling. Its features include
segmenting a sound file before each of its attacks, performing pitch
detection, tapping the beat and producing midi streams from live
audio. The name aubio comes from 'audio' with a typo: several
transcription errors are likely to be found in the results too.

The aim of this project is to provide these automatic labeling
features to other audio software. Functions can be used offline in
sound editors and software samplers, or online in audio effects and
virtual instruments.

-------------------------------------------------------------------------------
-
Update Information:

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802
-------------------------------------------------------------------------------
-
ChangeLog:

* Thu Aug 1 2019 Guido Aulisi <guido.aulisi@gmail.com> - 0.4.9-1
- Update to 0.4.9
- Some spec cleanup
- CVE-2018-19800 prevent a possible buffer overflow in new_aubio_tempo
- CVE-2018-19801 prevent a null-pointer dereference in new_aubio_filterbank
- CVE-2018-19802 prevent a null-pointer dereference in new_aubio_onset
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1735586 - CVE-2019-1010224 aubio: null pointer dereference in
component onset
https://bugzilla.redhat.com/show_bug.cgi?id=1735586
[ 2 ] Bug #1735588 - CVE-2019-1010223 aubio: buffer overflow in component
tempo
https://bugzilla.redhat.com/show_bug.cgi?id=1735588
[ 3 ] Bug #1735591 - CVE-2019-1010222 aubio: null pointer dereference in
component filterbank
https://bugzilla.redhat.com/show_bug.cgi?id=1735591
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-b1157fdfdc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung