shield Security update for soundtouch

SUSE-SLE-SERVER-12-SP4-2018-2564

This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) - CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) - CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630)

• Release Date
  Dec 10 2018
• References
  Bugzilla: 1108632, 1108630, 1108631
  CVEs: CVE-2018-17097, CVE-2018-17096, CVE-2018-17098
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.4 aarch64

• Packages
  libSoundTouch0
  Audio Processing Library

  1.7.1-5.6.1

  lock rpm

  soundtouch
  Audio Processing Library

  1.7.1-5.6.1

  lock src

SUSE Linux Enterprise Server 12.4 s390x

• Packages
  libSoundTouch0
  Audio Processing Library

  1.7.1-5.6.1

  lock rpm

  soundtouch
  Audio Processing Library

  1.7.1-5.6.1

  lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  libSoundTouch0
  Audio Processing Library

  1.7.1-5.6.1

  lock rpm

  soundtouch
  Audio Processing Library

  1.7.1-5.6.1

  lock src

SUSE Linux Enterprise Server 12.4 x86_64

• Packages
  libSoundTouch0
  Audio Processing Library

  1.7.1-5.6.1

  lock rpm

  soundtouch
  Audio Processing Library

  1.7.1-5.6.1

  lock src