[SECURITY] Fedora 42 Update: musescore-4.3.2-20.fc42

MuseScore is a free cross platform WYSIWYG music notation program. Some highlights: WYSIWYG, notes are entered on a "virtual note sheet" Unlimited number of staves Up to four voices per staff Easy and fast note entry with mouse, keyboard or MIDI Integrated sequencer and FluidSynth software...

Fedora 42 : musescore (2026-23b7799e1f)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23b7799e1f advisory. This update adds a patch to fix CVE-2025-56225, a flaw in the bundled version of fluidsynth. Tenable has extracted the preceding description block directly...

OESA-2026-1067 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1069 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1066 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1068 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1070 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-1065 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

Security update for fluidsynth (moderate)

openSUSE Security Update: Security update for fluidsynth Announcement ID: openSUSE-SU-2026:0014-1 Rating: moderate References: 1256435 Cross-References: CVE-2025-56225 CVSS scores: CVE-2025-56225 SUSE: 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE...

fluidsynth-2.5.2-2.1 on GA media (moderate)

fluidsynth-2.5.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:10038-1 Rating: moderate Cross-References: CVE-2025-56225 CVSS scores: CVE-2025-56225 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-56225 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

Astra Linux – Vulnerability in fluidsynth

Fluidsynth-2.4.6 and earlier versions are vulnerable to null pointer dereferencing in the fluidsynthmonopoly.c file, which can occur when loading an invalid MIDI file...

OPENSUSE-SU-2026:10038-1 fluidsynth-2.5.2-2.1 on GA media

These are all security issues fixed in the fluidsynth-2.5.2-2.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2025-56225

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...

Fedora 43 : musescore (2026-afe4be8cb3)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-afe4be8cb3 advisory. This update adds a patch to fix CVE-2025-56225, a flaw in the bundled version of fluidsynth. Tenable has extracted the preceding description block directly...

SUSE CVE-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...

CVE-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...

CVE-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...

UBUNTU-CVE-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...

fluidsynth 安全漏洞

fluidsynth is fluidsynth open source an application system . Used to generate audio by using SoundFont by reading and processing MIDI events from MIDI input devices. A security vulnerability exists in fluidsynth 2.4.6 and earlier versions, which stems from a null pointer dereference that may be...

CVE-2025-56225

CVE-2025-56225 affects fluidsynth-2.4.6 and earlier. The root cause is a NULL pointer dereference in fluid_synth_monopoly.c triggered when loading an invalid MIDI file. This can impact availability (CVE base score 7.5, HIGH). The connected advisories show patches/updates: Fedora advisories (FEDOR...