Errata overview
Errata ID 73
Date 2018-05-16
Source package soundtouch
Fixed in version 1.9.2-2+deb9u1
Description
This update addresses the following issues:
* The TDStretch::processSamples function allows remote attackers to cause a
  denial of service (infinite loop and CPU consumption) via a crafted wav
  file. (CVE-2017-9258)
* The TDStretch::acceptNewOverlapLength function allows remote attackers to
  cause a denial of service (memory allocation error and application crash)
  via a crafted wav file. (CVE-2017-9259)
* The TDStretchSSE::calcCrossCorr function allows remote attackers to cause a
  denial of service (heap-based buffer over-read and application crash) via a
  crafted wav file. (CVE-2017-9260)
Additional notes
CVE ID CVE-2017-9258
CVE-2017-9259
CVE-2017-9260
UCS Bug number #46621