Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Ubuntu 18.04 LTS: USN-3960-1 Moderate: WavPack Denial Of Service

ubuntu
Calendar Grey April 30, 2019
Dist Ubuntu Esm H88
Addressing WavPack's denial of service risk. Update to mitigate vulnerabilities on Ubuntu installations.
WavPack could be made to crash if it received a speciallycrafted file.

Summary

WavPack could be made to crash if it received a specially

crafted file.

Software Description:

- wavpack: audio codec (lossy and lossless) - encoder and decoder

Details:

It was discovered that WavPack incorrectly handled certain DFF files.

An attacker could possibly use this issue to cause a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service software update ubuntu wavpack

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libwavpack1                     5.1.0-5ubuntu0.1
  wavpack                         5.1.0-5ubuntu0.1

Ubuntu 18.10:
  libwavpack1                     5.1.0-4ubuntu0.2
  wavpack                         5.1.0-4ubuntu0.2

Ubuntu 18.04 LTS:
  libwavpack1                     5.1.0-2ubuntu1.3
  wavpack                         5.1.0-2ubuntu1.3

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3960-1

  CVE-2019-11498

April 30, 2019

Topics%20covered

Topics Covered

security advisory denial of service software update ubuntu wavpack

Package Information

  https://launchpad.net/ubuntu/+source/wavpack/5.1.0-5ubuntu0.1
  https://launchpad.net/ubuntu/+source/wavpack/5.1.0-4ubuntu0.2
  https://launchpad.net/ubuntu/+source/wavpack/5.1.0-2ubuntu1.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.