Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:0929-1

Опубликовано: 24 мар. 2021
Источник: suse-cvrf

Описание

Security update for wavpack

This update for wavpack fixes the following issues:

  • CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414).

Список пакетов

HPE Helion OpenStack 8
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP2-BCL
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP2-LTSS
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP3-BCL
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP3-LTSS
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP4-LTSS
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP5
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Software Development Kit 12 SP5
wavpack-4.60.99-5.9.1
wavpack-devel-4.60.99-5.9.1
SUSE OpenStack Cloud 7
libwavpack1-4.60.99-5.9.1
SUSE OpenStack Cloud 8
libwavpack1-4.60.99-5.9.1
SUSE OpenStack Cloud 9
libwavpack1-4.60.99-5.9.1
SUSE OpenStack Cloud Crowbar 8
libwavpack1-4.60.99-5.9.1
SUSE OpenStack Cloud Crowbar 9
libwavpack1-4.60.99-5.9.1

Ссылки

Описание

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.

Затронутые продукты
HPE Helion OpenStack 8:libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP2-BCL:libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP2-LTSS:libwavpack1-4.60.99-5.9.1
SUSE Linux Enterprise Server 12 SP3-BCL:libwavpack1-4.60.99-5.9.1
Ссылки