USN-4831-1: OpenMPT vulnerabilities
15 March 2021
OpenMPT could be made to crash if it opened a specially crafted file.
Releases
Packages
- libopenmpt - module music library based on OpenMPT
Details
It was discovered that OpenMPT incorrectly handled certain files. A remote
attacker could possibly use this issue to cause a denial of service or
other unspecified impact.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 18.04
-
libopenmpt0
-
0.3.6-1ubuntu0.1~esm1
Available with Ubuntu Pro
-
openmpt123
-
0.3.6-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.