MGASA-2018-0462

Source
https://advisories.mageia.org/MGASA-2018-0462.html
Import Source
https://advisories.mageia.org/MGASA-2018-0462.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2018-0462
Related
Published
2018-11-20T11:11:24Z
Modified
2018-11-20T10:48:06Z
Summary
Updated soundtouch packages fix security vulnerabilities
Details

Assertion failure in BPMDetect class in BPMDetect.cpp (CVE-2018-17096). Out-of-bounds heap write in WavOutFile::write() (CVE-2018-17097). Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098).

References
Credits

Affected packages

Mageia:6 / soundtouch

Package

Name
soundtouch
Purl
pkg:rpm/mageia/soundtouch?distro=mageia-6

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.1.1-1.mga6

Ecosystem specific

{
    "section": "core"
}