Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 25: 2017-0056 Moderate: Wavpack Heap Overflow Threats

fedora
Calendar Grey February 2, 2017
Dist Fedora Esm H88
Upgrade wavpack to version 5.1.0 to fix significant security vulnerabilities and enhance efficiency. Use DNF for installation.
Update wavpack to 5.1.0

Summary

WavPack is a completely open audio compression format providing lossless,

high-quality lossy, and a unique hybrid compression mode. Although the

technology is loosely based on previous versions of WavPack, the new

version 4 format has been designed from the ground up to offer unparalleled

performance and functionality.

Update Information:

Update wavpack to 5.1.0

Topics%20covered

Topics Covered

security advisory moderate update Fedora heap overflow audio codec wavpack

Change Log

References


[ 1 ] Bug #1417853 - CVE-2016-10172 wavpack: Heap out of bounds read in read_new_config_info / open_utils.c https://bugzilla.redhat.com/show_bug.cgi?id=1417853 [ 2 ] Bug #1417852 - CVE-2016-10171 wavpack: Heap out of bounds read in unreorder_channels / wvunpack.c https://bugzilla.redhat.com/show_bug.cgi?id=1417852 [ 3 ] Bug #1417851 - CVE-2016-10170 wavpack: Heap out of bounds read in WriteCaffHeader / caff.c https://bugzilla.redhat.com/show_bug.cgi?id=1417851 [ 4 ] Bug #1417850 - CVE-2016-10169 wavpack: Global buffer overread in read_code / read_words.c https://bugzilla.redhat.com/show_bug.cgi?id=1417850

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade wavpack' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: wavpack
Product: Fedora 25
Version: 5.1.0
Release: 1.fc25
URL: https://www.wavpack.com/
Summary: A completely open audiocodec

Topics%20covered

Topics Covered

security advisory moderate update Fedora heap overflow audio codec wavpack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here