[USN-4473-1] libmysofa vulnerabilities

[Eduardo Barretto]

==========================================================================
Ubuntu Security Notice USN-4473-1
August 26, 2020

libmysofa vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in libmysofa.

Software Description:
- libmysofa: library to read HRTFs stored in the AES69-2015 SOFA format

Details:

It was discovered that libmysofa incorrectly handled certain input files.
An attacker could possibly use this issue to cause a denial of service or
other unspecified impact.
(CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094,
CVE-2019-16095)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libmysofa0                      0.6~dfsg0-3+deb10u1build1

In general, a standard system update will make all the necessary changes.

References:
  https://usn.ubuntu.com/4473-1
  CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094,
  CVE-2019-16095

Package Information:
  https://launchpad.net/ubuntu/+source/libmysofa/0.6~dfsg0-3+deb10u1build1
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20200826/23ff3f4d/attachment.sig>