File _patchinfo of Package patchinfo.9894
<patchinfo incident="9894">
<issue tracker="bnc" id="1120929">VUL-1: CVE-2018-19841: wavpack: out-of-bounds read in function WavpackVerifySingleBlock can lead to a DoS</issue>
<issue tracker="bnc" id="1120930">VUL-1: CVE-2018-19840: wavpack: resource exhaustion caused by an infinite loop in function WavpackPackInit</issue>
<issue tracker="cve" id="2018-19840"/>
<issue tracker="cve" id="2018-19841"/>
<category>security</category>
<rating>moderate</rating>
<packager>sbrabec</packager>
<description>This update for wavpack fixes the following issues:
Security issues fixed:
- CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from pack_utils.c (bsc#1120930)
- CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from open_utils.c (bsc#1120929)
</description>
<summary>Security update for wavpack</summary>
</patchinfo>