Lucene search

K
suseSuseOPENSUSE-SU-2018:3691-1
HistoryNov 10, 2018 - 12:09 a.m.

Security update for soundtouch (moderate)

2018-11-1000:09:07
lists.opensuse.org
494

0.007 Low

EPSS

Percentile

78.5%

This update for soundtouch fixes the following issues:

  • CVE-2018-17098: The WavFileBase class allowed remote attackers to cause
    a denial of service (heap corruption from size inconsistency) or
    possibly have unspecified other impact, as demonstrated by SoundStretch.
    (bsc#1108632)
  • CVE-2018-17097: The WavFileBase class allowed remote attackers to cause
    a denial of service (double free) or possibly have unspecified other
    impact, as demonstrated by SoundStretch. (double free) (bsc#1108631)
  • CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a
    denial of service (assertion failure and application exit), as
    demonstrated by SoundStretch. (bsc#1108630)

This update was imported from the SUSE:SLE-15:Update update project.