Ubuntu Security Notice 4033-1 - It was discovered that a libmysofa component does not properly validate multiplications and additions, and may crash with some specific input.
09c6ad3c40f1db2d8e16728433af45b79bd7368acb7ca9b9293a6890e680a595
=========================================================================
Ubuntu Security Notice USN-4033-1
June 24, 2019
libmysofa vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 19.04
- Ubuntu 18.10
- Ubuntu 18.04 LTS
Summary:
libmysofa could be made to crash if it received specially crafted
input.
Software Description:
- libmysofa: library to read HRTFs stored in the AES69-2015 SOFA format
Details:
It was discovered that a libmysofa component does not properly validate
multiplications and additions, and may crash with some specific input.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 19.04:
libmysofa0 0.6~dfsg0-2ubuntu0.19.04.1
Ubuntu 18.10:
libmysofa0 0.6~dfsg0-2ubuntu0.18.10.1
Ubuntu 18.04 LTS:
libmysofa0 0.6~dfsg0-2ubuntu0.18.04.1
In general, a standard system update will make all the necessary changes.
References:
https://usn.ubuntu.com/4033-1
CVE-2019-10672
Package Information:
https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.19.04.1
https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.18.10.1
https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-2ubuntu0.18.04.1