UbuntuUpdates.org

Package "wavpack"

Name: wavpack

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • audio codec (lossy and lossless) - development files
  • audio codec (lossy and lossless) - library

Latest version: 5.1.0-4ubuntu0.2
Release: cosmic (18.10)
Level: updates
Repository: main

Links

Save this URL for the latest version of "wavpack": https://www.ubuntuupdates.org/wavpack



Other versions of "wavpack" in Cosmic

Repository Area Version
base main 5.1.0-4
base universe 5.1.0-4
security universe 5.1.0-4ubuntu0.2
security main 5.1.0-4ubuntu0.2
updates universe 5.1.0-4ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 5.1.0-4ubuntu0.2 2019-04-30 14:06:31 UTC

  wavpack (5.1.0-4ubuntu0.2) cosmic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2019-11498.patch: make sure sample rate variable
      is specified and non-zero in DFF files in cli/dsdiff.c.
    - CVE-2019-11498

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 29 Apr 2019 11:42:32 -0300

Source diff to previous version
CVE-2019-11498 WavpackSetConfiguration64 in pack_utils.c in libwavpack.a in WavPack through 5.1.0 has a "Conditional jump or move depends on uninitialised value" co

Version: 5.1.0-4ubuntu0.1 2018-12-06 15:07:12 UTC

  wavpack (5.1.0-4ubuntu0.1) cosmic-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19840.patch: checking
      if sample_rate is not zero in src/pack_utils.c.
    - CVE-2018-19840
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19841.patch: fix in
      src/open_utils.c.

 -- <email address hidden> (Leonidas S. Barbosa) Thu, 06 Dec 2018 08:57:02 -0300

CVE-2018-19840 The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaust
CVE-2018-19841 The function WavpackVerifySingleBlock in open_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (out-of-



About   -   Send Feedback to @ubuntu_updates