Debian/libopenmpt: critical 9.8
In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API,
Action: Upgrade libopenmpt to 0.4.9-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.9-1 | - |
Fixed versions
| 0.4.9-1 |
Sources
published · modified · JSON