[SECURITY] Fedora 30 Update: aubio-0.4.9-1.fc30
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-00ca0acb47
2019-08-12 01:00:55.517395
--------------------------------------------------------------------------------
Name : aubio
Product : Fedora 30
Version : 0.4.9
Release : 1.fc30
URL : http://aubio.org/
Summary : An audio labeling library
Description :
aubio is a library for audio labeling. Its features include
segmenting a sound file before each of its attacks, performing pitch
detection, tapping the beat and producing midi streams from live
audio. The name aubio comes from 'audio' with a typo: several
transcription errors are likely to be found in the results too.
The aim of this project is to provide these automatic labeling
features to other audio software. Functions can be used offline in
sound editors and software samplers, or online in audio effects and
virtual instruments.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-19800 CVE-2018-19801 CVE-2018-19802
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 1 2019 Guido Aulisi <guido.aulisi(a)gmail.com> - 0.4.9-1
- Update to 0.4.9
- Some spec cleanup
- CVE-2018-19800 prevent a possible buffer overflow in new_aubio_tempo
- CVE-2018-19801 prevent a null-pointer dereference in new_aubio_filterbank
- CVE-2018-19802 prevent a null-pointer dereference in new_aubio_onset
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1735586 - CVE-2019-1010224 aubio: null pointer dereference in component
onset
https://bugzilla.redhat.com/show_bug.cgi?id=1735586
[ 2 ] Bug #1735588 - CVE-2019-1010223 aubio: buffer overflow in component tempo
https://bugzilla.redhat.com/show_bug.cgi?id=1735588
[ 3 ] Bug #1735591 - CVE-2019-1010222 aubio: null pointer dereference in component
filterbank
https://bugzilla.redhat.com/show_bug.cgi?id=1735591
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-00ca0acb47' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------