FS#57609 : [wavpack] multiple cves

Attached to Project: Arch Linux
Opened by Karol Babioch (kbabioch) - Thursday, 22 February 2018, 19:30 GMT
Last edited by Antonio Rojas (arojas) - Thursday, 22 February 2018, 20:29 GMT

Task Type	Bug Report
Category	Security
Status	Closed
Assigned To	Eric Belanger (Snowman) Antonio Rojas (arojas) Levente Polyak (anthraxx)
Architecture	All
Severity	High
Priority	Normal
Reported Version
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	0
Private	No

Details

The package is vulnerable to these CVEs:

CVE-2018-6767
CVE-2018-7253
CVE-2018-7254

References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6767
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7253
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7254

This task depends upon

Closed by Antonio Rojas (arojas)
Thursday, 22 February 2018, 20:29 GMT
Reason for closing: Fixed
Additional comments about closing: wavpack 5.1.0-2

Details

Loading...