Sigurnosni nedostaci programskog paketa aubio

Preporuke

by - 12. kolovoza 2019.0

——————————————————————————–
Fedora Update Notification
FEDORA-2019-b1157fdfdc
2019-08-12 01:39:02.163196
——————————————————————————–

Name : aubio
Product : Fedora 29
Version : 0.4.9
Release : 1.fc29
URL : http://aubio.org/
Summary : An audio labeling library
Description :
aubio is a library for audio labeling. Its features include
segmenting a sound file before each of its attacks, performing pitch
detection, tapping the beat and producing midi streams from live
audio. The name aubio comes from ‘audio’ with a typo: several
transcription errors are likely to be found in the results too.

The aim of this project is to provide these automatic labeling
features to other audio software. Functions can be used offline in
sound editors and software samplers, or online in audio effects and
virtual instruments.

——————————————————————————–
Update Information:

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802
——————————————————————————–
ChangeLog:

* Thu Aug 1 2019 Guido Aulisi <guido.aulisi@gmail.com> – 0.4.9-1
– Update to 0.4.9
– Some spec cleanup
– CVE-2018-19800 prevent a possible buffer overflow in new_aubio_tempo
– CVE-2018-19801 prevent a null-pointer dereference in new_aubio_filterbank
– CVE-2018-19802 prevent a null-pointer dereference in new_aubio_onset
——————————————————————————–
References:

[ 1 ] Bug #1735586 – CVE-2019-1010224 aubio: null pointer dereference in component onset
https://bugzilla.redhat.com/show_bug.cgi?id=1735586
[ 2 ] Bug #1735588 – CVE-2019-1010223 aubio: buffer overflow in component tempo
https://bugzilla.redhat.com/show_bug.cgi?id=1735588
[ 3 ] Bug #1735591 – CVE-2019-1010222 aubio: null pointer dereference in component filterbank
https://bugzilla.redhat.com/show_bug.cgi?id=1735591
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-b1157fdfdc’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2019-00ca0acb47
2019-08-12 01:00:55.517395
——————————————————————————–

Name : aubio
Product : Fedora 30
Version : 0.4.9
Release : 1.fc30
URL : http://aubio.org/
Summary : An audio labeling library
Description :
aubio is a library for audio labeling. Its features include
segmenting a sound file before each of its attacks, performing pitch
detection, tapping the beat and producing midi streams from live
audio. The name aubio comes from ‘audio’ with a typo: several
transcription errors are likely to be found in the results too.

——————————————————————————–
Update Information:

Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802
——————————————————————————–
ChangeLog:

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-00ca0acb47’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Sigurnosni nedostaci programskog paketa aubio

Archives

More in Preporuke

Sigurnosni nedostaci programskog paketa icedtea-web