Описание
Security update for wavpack
This update for wavpack fixes the following issues:
- CVE-2021-44269: Fixed out of bounds read in processing .wav files (bsc#1197020).
Список пакетов
openSUSE Leap 15.3
libwavpack1-5.4.0-4.12.1
libwavpack1-32bit-5.4.0-4.12.1
wavpack-5.4.0-4.12.1
wavpack-devel-5.4.0-4.12.1
Ссылки
- E-Mail link for openSUSE-SU-2022:0954-1
- SUSE Security Ratings
- SUSE Bug 1197020
- SUSE CVE CVE-2021-44269 page
Описание
An out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered in function WavpackPackSamples of file src/pack_utils.c, tainted variable cnt is too large, that makes pointer sptr read beyond heap bound.
Затронутые продукты
openSUSE Leap 15.3:libwavpack1-32bit-5.4.0-4.12.1
openSUSE Leap 15.3:libwavpack1-5.4.0-4.12.1
openSUSE Leap 15.3:wavpack-5.4.0-4.12.1
openSUSE Leap 15.3:wavpack-devel-5.4.0-4.12.1
Ссылки
- CVE-2021-44269
- SUSE Bug 1197020