RHSA-2020:1581-01 -- Redhat wavpackID: oval:org.secpod.oval:def:66772 | Date: (C)2020-11-09 (M)2022-10-13 |
Class: PATCH | Family: unix |
WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid compression mode. Security Fix: * wawpack: Infinite loop in WavpackPackInit function lead to DoS * wawpack: Out-of-bounds read in WavpackVerifySingleBlock function leads to DoS * wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS * wavpack: Divide by zero in ParseDsdiffHeaderConfig leads to crash * wavpack: Use of uninitialized variable in ParseCaffHeaderConfig leads to DoS * wavpack: Use of uninitialized variable in ParseWave64HeaderConfig leads to DoS For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the CentOS 8.2 Release Notes linked from the References section.