Alerts This Week
Warning Icon 1 697
Alerts This Week
Warning Icon 1 697

Fedora 26: Wavpack Update - CVE-2018-6767 Critical Buffer Overflow

fedora
Calendar Grey March 13, 2018
Dist Fedora Esm H88
The Ubuntu flac security patch resolves severe memory leak vulnerabilities. Update promptly to maintain security and performance.
* CVE-2018-6767 * CVE-2018-7253

Summary

WavPack is a completely open audio compression format providing lossless,

high-quality lossy, and a unique hybrid compression mode. Although the

technology is loosely based on previous versions of WavPack, the new

version 4 format has been designed from the ground up to offer unparalleled

performance and functionality.

* CVE-2018-6767 * CVE-2018-7253

[ 1 ] Bug #1542552 - CVE-2018-6767 wavpack: stack buffer overflow via crafted wav file [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1542552

su -c 'dnf upgrade wavpack' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 26
Version: 5.1.0
Release: 7.fc26
Summary: A completely open audiocodec

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here