Revision Date: | 2019-08-21 | Version: | 1 |
Title: | Security update for wavpack (Low) |
Description: |
This update for wavpack fixes the following issues:
Security issues fixed:
- CVE-2019-1010319: Fixed use of uninitialized variable in ParseWave64HeaderConfig that can result in unexpected control flow, crashes, and segfaults (bsc#1141334). - CVE-2019-11498: Fixed possible denial of service (application crash) in WavpackSetConfiguration64 via a DFF file that lacks valid sample-rate data (bsc#1133384).
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1133384 1141334 CVE-2019-1010319 CVE-2019-11498 SUSE-SU-2019:2191-1
|
Platform(s): | SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Storage 6 SUSE Manager Proxy 4.0 SUSE Manager Server 4.0
| Product(s): | |
Definition Synopsis |
SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND Package Information
wavpack-5.1.0-4.6.1 is installed
OR wavpack-devel-5.1.0-4.6.1 is installed
|