Oval Definition:oval:org.opensuse.security:def:97487
Revision Date:2019-08-21Version:1
Title:Security update for wavpack (Low)
Description:

This update for wavpack fixes the following issues:

Security issues fixed:

- CVE-2019-1010319: Fixed use of uninitialized variable in ParseWave64HeaderConfig that can result in unexpected control flow, crashes, and segfaults (bsc#1141334). - CVE-2019-11498: Fixed possible denial of service (application crash) in WavpackSetConfiguration64 via a DFF file that lacks valid sample-rate data (bsc#1133384).
Family:unixClass:patch
Status:Reference(s):1133384
1141334
CVE-2019-1010319
CVE-2019-11498
SUSE-SU-2019:2191-1
Platform(s):SUSE Linux Enterprise Desktop 15 SP1
SUSE Linux Enterprise High Performance Computing 15 SP1
SUSE Linux Enterprise Module for Desktop Applications 15 SP1
SUSE Linux Enterprise Server 15 SP1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
SUSE Linux Enterprise Storage 6
SUSE Manager Proxy 4.0
SUSE Manager Server 4.0
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed
  • AND Package Information
  • wavpack-5.1.0-4.6.1 is installed
  • OR wavpack-devel-5.1.0-4.6.1 is installed
  • BACK