Control: retitle -1 libopenmpt0: CVE-2018-6611 On 04/02/18 12:26, James Cowgill wrote: > Package: libopenmpt0 > Version: 0.3.1-1 > Severity: grave > Tags: security > > This security update was published for libopenmpt: > https://lib.openmpt.org/libopenmpt/2018/02/03/security-update-0.3.6/ > >> The OpenMPT/libopenmpt project released the latest stable libopenmpt version: >> >> libopenmpt 0.3.6 (2018-02-03) >> [Sec] Possible out-of-bounds memory read with malformed STP files. (r9576) > > The bug only affects 0.3.x so it will not require any updates to stable. > > I have requested a CVE for this bug.
... and it was allocated CVE-2018-6611. James
signature.asc
Description: OpenPGP digital signature