Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:14669-1

Опубликовано: 19 мар. 2021
Источник: suse-cvrf

Описание

Security update for wavpack

This update for wavpack fixes the following issues:

  • CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414).

Список пакетов

SUSE Linux Enterprise Point of Sale 11 SP3
libwavpack1-4.50.1-1.33.1
SUSE Linux Enterprise Server 11 SP4-LTSS
libwavpack1-4.50.1-1.33.1

Ссылки

Описание

WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" releases through 5.3.2, which are also affected.

Затронутые продукты
SUSE Linux Enterprise Point of Sale 11 SP3:libwavpack1-4.50.1-1.33.1
SUSE Linux Enterprise Server 11 SP4-LTSS:libwavpack1-4.50.1-1.33.1
Ссылки