{"id":"SUSE-SU-2019:2435-1","summary":"Security update for libopenmpt","details":"This update for libopenmpt fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-20861: Fixed crash with certain malformed custom tunings in MPTM files (bsc#1143578).\n- CVE-2018-20860: Fixed crash with malformed MED files (bsc#1143581).\n- CVE-2019-14383: Fixed J2B that allows an assertion failure during file parsing with debug STLs (bsc#1143584).\n- CVE-2019-14382: Fixed DSM that allows an assertion failure during file parsing with debug STLs (bsc#1143582).\n","modified":"2026-03-11T07:11:25.402621Z","published":"2019-09-23T11:57:15Z","related":["CVE-2018-20860","CVE-2018-20861","CVE-2019-14382","CVE-2019-14383"],"upstream":["CVE-2018-20860","CVE-2018-20861","CVE-2019-14382","CVE-2019-14383"],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192435-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143578"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143581"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143582"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143584"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-20860"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-20861"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-14382"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-14383"}],"affected":[{"package":{"name":"libopenmpt","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","purl":"pkg:rpm/suse/libopenmpt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.17-2.7.1"}]}],"ecosystem_specific":{"binaries":[{"libopenmpt-devel":"0.3.17-2.7.1","libopenmpt0":"0.3.17-2.7.1","libopenmpt_modplug1":"0.3.17-2.7.1","libmodplug-devel":"0.3.17-2.7.1","libmodplug1":"0.3.17-2.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2435-1.json"}},{"package":{"name":"libopenmpt","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","purl":"pkg:rpm/suse/libopenmpt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.17-2.7.1"}]}],"ecosystem_specific":{"binaries":[{"libmodplug1":"0.3.17-2.7.1","libopenmpt-devel":"0.3.17-2.7.1","libopenmpt0":"0.3.17-2.7.1","libopenmpt_modplug1":"0.3.17-2.7.1","libmodplug-devel":"0.3.17-2.7.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:2435-1.json"}}],"schema_version":"1.7.5"}