RLSA-2020:1581
- Source
- https://errata.rockylinux.org/RLSA-2020:1581
- Import Source
- https://storage.googleapis.com/resf-osv-data/RLSA-2020:1581.json
- JSON Data
- https://api.osv.dev/v1/vulns/RLSA-2020:1581
- Related
- Published
- 2020-04-28T08:53:05Z
- Modified
- 2023-02-02T14:09:50.344257Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- Low: wavpack security update
- Details
-
WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode.
Security Fix(es):
wawpack: Infinite loop in WavpackPackInit function lead to DoS (CVE-2018-19840)
wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS (CVE-2018-19841)
wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS (CVE-2019-11498)
wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash (CVE-2019-1010315)
wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS (CVE-2019-1010317)
wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS (CVE-2019-1010319)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.
- References
-
- https://errata.rockylinux.org/RLSA-2020:1581
- https://bugzilla.redhat.com/show_bug.cgi?id=1661448
- https://bugzilla.redhat.com/show_bug.cgi?id=1661449
- https://bugzilla.redhat.com/show_bug.cgi?id=1704633
- https://bugzilla.redhat.com/show_bug.cgi?id=1729418
- https://bugzilla.redhat.com/show_bug.cgi?id=1737740
- https://bugzilla.redhat.com/show_bug.cgi?id=1737747
- Credits
-
-
- Rocky Enterprise Software Foundation
-
- Red Hat
-
Affected packages
Rocky Linux:8 / wavpack
Package
- Name
- wavpack
- Purl
- pkg:rpm/rocky-linux/wavpack?distro=rocky-linux-8-4-legacy&epoch=0