UbuntuUpdates.org

Package "wavpack"

Name: wavpack

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • audio codec (lossy and lossless) - development files
  • audio codec (lossy and lossless) - library
Latest version: 4.75.2-2ubuntu0.2
Release: xenial (16.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "wavpack" in Xenial

Repository Area Version
base main 4.75.2-2
base universe 4.75.2-2
security universe 4.75.2-2ubuntu0.2
updates main 4.75.2-2ubuntu0.2
updates universe 4.75.2-2ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 4.75.2-2ubuntu0.2 2018-12-06 15:07:04 UTC

  wavpack (4.75.2-2ubuntu0.2) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2018-19840.patch: checking
      if sample_rate is not zero in src/pack_utils.c and
      removing register keyword in src/read_words.c.
    - CVE-2018-19840

 -- <email address hidden> (Leonidas S. Barbosa) Wed, 05 Dec 2018 16:51:11 -0300
Source diff to previous version
CVE-2018-19840 The function WavpackPackInit in pack_utils.c in libwavpack.a in WavPack through 5.1.0 allows attackers to cause a denial-of-service (resource exhaust

Version: 4.75.2-2ubuntu0.1 2018-02-12 21:08:13 UTC

  wavpack (4.75.2-2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Denial of service via crafted WV file
    - debian/patches/CVE-2016-10169.patch: fix in words.c.
    - CVE-2016-10169

 -- <email address hidden> (Leonidas S. Barbosa) Mon, 12 Feb 2018 11:33:50 -0300
CVE-2016-10169 The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafte


About   -   Send Feedback to @ubuntu_updates