Slackware 14.0 / 14.1 / 14.2 / current : wavpack (SSA:2019-353-01)

New wavpack packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-353-01. The text itself is copyright C Slackware...

[slackware-security] wavpack

New wavpack packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wavpack-5.2.0-i586-1slack14.2.txz: Upgraded. Fixed denial-of-service and other potential security issues. For more...

EulerOS 2.0 SP3 : wavpack (EulerOS-SA-2019-2680)

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource...

EulerOS 2.0 SP2 : wavpack (EulerOS-SA-2019-2413)

According to the version of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The readcode function in readwords.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ...

EulerOS 2.0 SP8 : wavpack (EulerOS-SA-2019-2122)

According to the version of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - WavpackSetConfiguration64 in packutils.c in libwavpack.a in WavPack through 5.1.0 has a 'Conditional jump or move depends on uninitialised value'...

EulerOS 2.0 SP5 : wavpack (EulerOS-SA-2019-2195)

According to the version of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The readcode function in readwords.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ...

EulerOS 2.0 SP8 : wavpack (EulerOS-SA-2019-2095)

According to the versions of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - WavPack 5.1.0 and earlier is affected by: CWE-457: Use of Uninitialized Variable. The impact is: Unexpected control flow, crashes, and segfaults...

EulerOS 2.0 SP2 : wavpack (EulerOS-SA-2019-1874)

According to the version of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource...

EulerOS 2.0 SP5 : wavpack (EulerOS-SA-2019-1901)

According to the version of the wavpack package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The function WavpackPackInit in packutils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service resource...

openSUSE Security Update : wavpack (openSUSE-2019-2067)

This update for wavpack fixes the following issues : Security issues fixed : - CVE-2019-1010319: Fixed use of uninitialized variable in ParseWave64HeaderConfig that can result in unexpected control flow, crashes, and segfaults bsc1141334. - CVE-2019-11498: Fixed possible denial of service...

openSUSE: Security Advisory for wavpack (openSUSE-SU-2019:2067-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2019:2067-1 Security update for wavpack

This update for wavpack fixes the following issues: Security issues fixed: - CVE-2019-1010319: Fixed use of uninitialized variable in ParseWave64HeaderConfig that can result in unexpected control flow, crashes, and segfaults bsc1141334. - CVE-2019-11498: Fixed possible denial of service applicati...

Security update for wavpack (low)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2019:2067-1 Rating: low References: 1133384 1141334 Cross-References: CVE-2019-1010319 CVE-2019-11498 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes two vulnerabilities is now...

Fedora 29 : wavpack (2019-8eeb8f9d3f)

Fix for CVE-2019-1010317 and CVE-2019-1010319 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora 30 : wavpack (2019-c72f5f6361)

Fix for CVE-2019-1010317 and CVE-2019-1010319 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C...

Fedora Update for wavpack FEDORA-2019-8eeb8f9d3f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for wavpack FEDORA-2019-c72f5f6361

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: wavpack-5.1.0-16.fc29

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

[SECURITY] Fedora 30 Update: wavpack-5.1.0-16.fc30

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

Updated wavpack packages fix security vulnerabilities

Updated wavpack packages fixes security vulnerabilities: Rohan Padhye discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319...