SUSE-SU-2019:0772-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:0772-1

Related

Published

2019-03-27T09:37:18Z

Modified

2019-03-27T09:37:18Z

Summary

Security update for wavpack

Details

This update for wavpack fixes the following issues:

Security issues fixed:

CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from pack_utils.c (bsc#1120930)
CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from open_utils.c (bsc#1120929)

References

Affected packages

Name: wavpack
Purl: pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1.0-4.3.5

{
    "binaries": [
        {
            "libwavpack1": "5.1.0-4.3.5"
        }
    ]
}

Name: wavpack
Purl: pkg:rpm/suse/wavpack&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.1.0-4.3.5

{
    "binaries": [
        {
            "wavpack-devel": "5.1.0-4.3.5",
            "wavpack": "5.1.0-4.3.5"
        }
    ]
}