SUSE-SU-2021:0929-1

Details

This update for wavpack fixes the following issues:

CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414).

Affected Packages

libwavpack1

SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

4.60.99-5.9.1

wavpack

SUSE HPE Helion OpenStack 8SUSE Linux Enterprise Server 12 SP2-BCLSUSE Linux Enterprise Server 12 SP2-LTSSSUSE Linux Enterprise Server 12 SP3-BCLSUSE Linux Enterprise Server 12 SP3-LTSS

Fixed in:

4.60.99-5.9.1

wavpack-devel

SUSE Linux Enterprise Software Development Kit 12 SP5

Fixed in:

4.60.99-5.9.1

References

REPORT

https://bugzilla.suse.com/1180414

WEB

https://www.suse.com/security/cve/CVE-2020-35738

ADVISORY

https://www.suse.com/support/update/announcement/2021/suse-su-20210929-1/