Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Ubuntu 19.04 & 18.04 LTS: Addressing USN-4062-1 WavPack DoS Vulnerability

ubuntu
Calendar Grey July 16, 2019
Dist Ubuntu Esm H88
Flaws in WavPack on Ubuntu could lead to system crashes when handling specially crafted WAV files. It's advisable to update for improved protection.
WavPack could be made to crash if it received a specially crafted WAV file.

Summary

WavPack could be made to crash if it received a specially crafted WAV file.

Software Description:

- wavpack: audio codec (lossy and lossless) - encoder and decoder

Details:

Rohan Padhye discovered that WavPack incorrectly handled certain WAV files.

An attacker could possibly use this issue to cause a denial of service.

(CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu audio codec WavPack

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  libwavpack1                     5.1.0-5ubuntu0.2
  wavpack                         5.1.0-5ubuntu0.2

Ubuntu 18.04 LTS:
  libwavpack1                     5.1.0-2ubuntu1.4
  wavpack                         5.1.0-2ubuntu1.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-4062-1

CVE-2019-1010315, CVE-2019-1010317, CVE-2019-1010318, CVE-2019-1010319

Severity
important
Lowest
Low
Medium
High
Critical

July 16, 2019

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu audio codec WavPack

Package Information

https://launchpad.net/ubuntu/+source/wavpack/5.1.0-5ubuntu0.2
https://launchpad.net/ubuntu/+source/wavpack/5.1.0-2ubuntu1.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.