Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora: 2017-9d7f592a03 Moderate: Wavpack Security Update

fedora
Calendar Grey February 4, 2017
Dist Fedora Esm H88
Wavpack reached version 5.1.0, resolving several buffer overread vulnerabilities and boosting security measures in Fedora 24.
Update wavpack to 5.1.0

Summary

WavPack is a completely open audio compression format providing lossless,

high-quality lossy, and a unique hybrid compression mode. Although the

technology is loosely based on previous versions of WavPack, the new

version 4 format has been designed from the ground up to offer unparalleled

performance and functionality.

Update Information:

Update wavpack to 5.1.0

Topics%20covered

Topics Covered

security advisory Fedora audio codec buffer overread wavpack

Change Log

References


[ 1 ] Bug #1417853 - CVE-2016-10172 wavpack: Heap out of bounds read in read_new_config_info / open_utils.c https://bugzilla.redhat.com/show_bug.cgi?id=1417853 [ 2 ] Bug #1417852 - CVE-2016-10171 wavpack: Heap out of bounds read in unreorder_channels / wvunpack.c https://bugzilla.redhat.com/show_bug.cgi?id=1417852 [ 3 ] Bug #1417851 - CVE-2016-10170 wavpack: Heap out of bounds read in WriteCaffHeader / caff.c https://bugzilla.redhat.com/show_bug.cgi?id=1417851 [ 4 ] Bug #1417850 - CVE-2016-10169 wavpack: Global buffer overread in read_code / read_words.c https://bugzilla.redhat.com/show_bug.cgi?id=1417850

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade wavpack' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: wavpack
Product: Fedora 24
Version: 5.1.0
Release: 1.fc24
URL: https://www.wavpack.com/
Summary: A completely open audiocodec

Topics%20covered

Topics Covered

security advisory Fedora audio codec buffer overread wavpack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here