FEDORA-2018-f4f75985b8 — security update for soundtouch

stable

soundtouch-2.0.0-6.fc28

FEDORA-2018-f4f75985b8 created by jwrdegoede 7 years ago for Fedora 28

Security fix for CVE-2018-14044, CVE-2018-14045 and CVE-2018-1000223

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-f4f75985b8

This update has been submitted for testing by jwrdegoede.

7 years ago

This update has been pushed to testing.

7 years ago

cserpentis commented & provided feedback 7 years ago

karma

works for me

lobocode commented & provided feedback 7 years ago

karma

works

hreindl commented & provided feedback 7 years ago

karma

works for me

This update has been submitted for batched by bodhi.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

soundtouch-2.0.0-6.fc28

BZ#1601618 CVE-2018-14044 soundtouch: Reachable assertion in RateTransposer::setChannels() causing denial of service

BZ#1601620 CVE-2018-14044 soundtouch: Denial of Service (DoS) in RateTransposer.cpp in libSoundTouch.a [fedora-all]

BZ#1601624 CVE-2018-14045 soundtouch: Reachable assertion in FIRFilter.cpp causing denial of service

BZ#1601625 CVE-2018-14045 soundtouch: Denial of Service (DoS) in FIRFilter.cpp in libSoundTouch.a [fedora-all]

BZ#1609193 CVE-2018-1000223 soundtouch: Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution

BZ#1609194 CVE-2018-1000223 soundtouch: Heap-based buffer overflow in SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() potentially leading to code execution [fedora-all]

soundtouch-2.0.0-6.fc28

Automated Test Results

ignored