[SECURITY] Fedora 29 Update: wavpack-5.1.0-12.fc29

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

Fedora 29 : wavpack (2019-88f264563f)

Fix for CVE-2018-19840 CVE-2018-19841 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...

[SECURITY] Fedora 30 Update: wavpack-5.1.0-12.fc30

WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Although the technology is loosely based on previous versions of WavPack, the new version 4 format has been designed from the ground up to offer unparalleled...

openSUSE: Security Advisory for wavpack (openSUSE-SU-2019:1145-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : wavpack (openSUSE-2019-1145)

This update for wavpack fixes the following issues : Security issues fixed : - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 - CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from openutils.c bsc1120929 Thi...

OPENSUSE-SU-2019:1145-1 Security update for wavpack

This update for wavpack fixes the following issues: Security issues fixed: - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 - CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from openutils.c bsc1120929 This...

Security update for wavpack (moderate)

openSUSE Security Update: Security update for wavpack Announcement ID: openSUSE-SU-2019:1145-1 Rating: moderate References: 1120929 1120930 Cross-References: CVE-2018-19840 CVE-2018-19841 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description:...

SUSE SLED15 / SLES15 Security Update : wavpack (SUSE-SU-2019:0772-1)

This update for wavpack fixes the following issues : Security issues fixed : CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from openutils.c bsc1120929 Note th...

SUSE SLES11 Security Update : wavpack (SUSE-SU-2019:13990-1)

This update for wavpack fixes the following issues : Security issues fixed : CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2019:0772-1 Security update for wavpack

This update for wavpack fixes the following issues: Security issues fixed: - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930 - CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from openutils.c bsc1120929...

SUSE-SU-2019:13990-1 Security update for wavpack

This update for wavpack fixes the following issues: Security issues fixed: - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from packutils.c bsc1120930...

PT-2019-5869

Name of the Vulnerable Software and Affected Versions WavPack versions 5.1.0 and earlier Description The issue is related to the use of uninitialized variables in the ParseWave64HeaderConfig component of the WavPack audio codec. This can lead to unexpected control flow, crashes, and segfaults whe...

PT-2019-5868

Name of the Vulnerable Software and Affected Versions WavPack versions 5.1.0 and earlier Description The issue is related to the use of uninitialized variables in the ParseCaffHeaderConfig function of the WavPack audio codec. This can be exploited by a remote attacker using a malicious .wav file,...

PT-2019-5871

Name of the Vulnerable Software and Affected Versions WavPack versions through 5.1.0 Description The issue is related to access to an uninitialized pointer in the WavPack audio codec. It allows a remote attacker to cause a denial of service via a DFF file lacking valid sample-rate data. The...

PT-2019-5867

Name of the Vulnerable Software and Affected Versions WavPack versions 5.1 and earlier Description The issue is related to a division by zero error in the ParseDsdiffHeaderConfig function of the dsdiff.c component in the WavPack audio codec. This can be exploited by a remote attacker using a...

MGASA-2019-0045 Updated wavpack packages fix security vulnerabilities

Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service CVE-2018-6767. It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cau...

Updated wavpack packages fix security vulnerabilities

Joonun Jang discovered that WavPack incorrectly handled certain RF64 files. An attacker could possibly use this to cause a denial of service CVE-2018-6767. It was discovered that WavPack incorrectly handled certain DSDIFF files. An attacker could possibly use this to execute arbitrary code or cau...

Fedora 28 : wavpack (2018-17a97bb25b)

Security fix for CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possib...

USN-3839-1: WavPack vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that WavPack incorrectly handled certain WAV files. An attacker could possibly use this issue to cause a denial of service. CVE-2018-19840, CVE-2018-19841 CVEs contained in this USN...

Ubuntu: Security Advisory (USN-3839-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...