Security update for schismtracker (important)

An update that fixes two vulnerabilities is now available.

Description:

This update for schismtracker fixes the following issues:

The following security issues were fixed:

• CVE-2019-14523: Fixed an integer underflow in the Amiga Oktalyzer parser
  (boo#1144266).
• CVE-2019-14524: Fixed a heap overflow in the MTM loader (boo#1144261).

The following non-security issues were fixed:

• Support 15-channel MOD files.
• Support undocumented MIDI macro characters, and support character p
  (MIDI program) properly.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

• openSUSE Leap 15.1:

  zypper in -t patch openSUSE-2019-1994=1

• openSUSE Leap 15.0:

  zypper in -t patch openSUSE-2019-1994=1