FEDORA-2018-023baab00f — security update for mingw-wavpack

stable

mingw-wavpack-5.1.0-4.fc27

FEDORA-2018-023baab00f created by valtri 6 years ago for Fedora 27

Security fix for CVE-2018-6767, CVE-2018-7253, and CVE-2018-7254

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-023baab00f

This update has been submitted for testing by valtri.

6 years ago

This update has been pushed to testing.

6 years ago

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

6 years ago

This update has been submitted for batched by valtri.

6 years ago

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

mingw-wavpack-5.1.0-4.fc27

BZ#1542550 CVE-2018-6767 wavpack: stack buffer overread via crafted wav file

BZ#1547719 CVE-2018-7253 wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c

BZ#1547724 CVE-2018-7253 mingw-wavpack: wavpack: Heap-based buffer over-read in ParseDsdiffHeaderConfig function in cli/dsdiff.c [fedora-all]

BZ#1547735 CVE-2018-7254 wavpack: Global buffer over-read in ParseCaffHeaderConfig function in cli/caff.c

BZ#1547736 CVE-2018-7254 mingw-wavpack: wavpack: Heap-based buffer over-read in ParseCaffHeaderConfig function in cli/caff.c [fedora-all]

mingw-wavpack-5.1.0-4.fc27

Automated Test Results

passed