SUSE-SU-2019:13990-1

LOW3.3

Security update for wavpack

Published Mar 27, 2019

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for wavpack fixes the following issues:

Security issues fixed:

CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from pack_utils.c (bsc#1120930)

Affected Packages

wavpack

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

4.50.1-1.30.1

wavpack-devel

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4

Fixed in:

4.50.1-1.30.1

References

ADVISORY

https://bugzilla.suse.com/1120930

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2019-March/005251.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-19840/

WEB

https://www.suse.com/support/security/rating/

ADVISORY