ELSA-2020-1581

ELSA-2020-1581 - wavpack security update

Type:	SECURITY
Impact:	LOW
Release Date:	2020-05-05

Description

[5.1.0-15]
- fix Out-of-bounds read in WavpackVerifySingleBlock function (#1663151)
- CVE-2018-19841

[5.1.0-14]
- fix uninitialized variable in ParseCaffHeaderConfig (#1741251)
- CVE-2019-1010317

[5.1.0-13]
- fortify parsing of .dff files (#1707428, #1733627)
- CVE-2019-1010315
- CVE-2019-11498

[5.1.0-12]
- fix possible infinite loop in WavpackPackInit function (#1663154)
- CVE-2018-19840

[5.1.0-11]
- Fix issues with gating

[5.1.0-10]
- fix uninitialized variable in ParseWave64HeaderConfig (#1741200)
- CVE-2019-1010319

Related CVEs

CVE-2018-19840

CVE-2019-1010315

CVE-2019-1010319

CVE-2018-19841

CVE-2019-11498

CVE-2019-1010317

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	wavpack-5.1.0-15.el8.src.rpm	6f109f3c65b0a2e4a9cc17442600513fe88b92f8ef4c60c14b4bc26c14fc8ea9	-	ol8_aarch64_appstream
	wavpack-5.1.0-15.el8.src.rpm	6f109f3c65b0a2e4a9cc17442600513fe88b92f8ef4c60c14b4bc26c14fc8ea9	-	ol8_aarch64_codeready_builder
	wavpack-5.1.0-15.el8.aarch64.rpm	8217dee18318a16a941e63445bfc9b373d67c439cf7f8c9e65e4c59fbfb0b865	-	ol8_aarch64_appstream
	wavpack-devel-5.1.0-15.el8.aarch64.rpm	8b658554adba56adbaaedb76d3104a78ada7be8cb0fef2e0cfe61b636bfd0fc4	-	ol8_aarch64_codeready_builder
Oracle Linux 8 (x86_64)	wavpack-5.1.0-15.el8.src.rpm	6f109f3c65b0a2e4a9cc17442600513fe88b92f8ef4c60c14b4bc26c14fc8ea9	-	ol8_x86_64_appstream
	wavpack-5.1.0-15.el8.src.rpm	6f109f3c65b0a2e4a9cc17442600513fe88b92f8ef4c60c14b4bc26c14fc8ea9	-	ol8_x86_64_codeready_builder
	wavpack-5.1.0-15.el8.i686.rpm	3021e6bebbbd7678478a3753aa5de8fb133c95a0d318b5e19c58025471bfeae9	-	ol8_x86_64_appstream
	wavpack-5.1.0-15.el8.x86_64.rpm	42cfd454cad542ba6389fa701d740f4b5001fa89aed5be779151524f9cf39f1e	-	ol8_x86_64_appstream
	wavpack-devel-5.1.0-15.el8.i686.rpm	b3f3f893165283ed1ffbfd3ed59c45ad14d21bbe82c3739695a4057d26825263	-	ol8_x86_64_codeready_builder
	wavpack-devel-5.1.0-15.el8.x86_64.rpm	648dced26348bc5018b831f8d86421f767f6f35d30e60f9177840cc6e5e5dd9b	-	ol8_x86_64_codeready_builder

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team