advisories/20205.adv

type: security
subject: Updated wavpack packages fix security vulnerability
CVE:
 - CVE-2016-10169
src:
  5:
   core:
     - wavpack-4.70.0-3.1.mga5
description: |
  Hanno Böck discovered a global buffer overread vulnerability in WavPack's
  word parsing logic (CVE-2016-10169), this update fixes it.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=20205
 - http://openwall.com/lists/oss-security/2017/01/23/4
 - https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
ID: MGASA-2017-0077
1	type: security
2	subject: Updated wavpack packages fix security vulnerability
3	CVE:
4	- CVE-2016-10169
5	src:
6	5:
7	core:
8	- wavpack-4.70.0-3.1.mga5
9	description: \|
10	Hanno Böck discovered a global buffer overread vulnerability in WavPack's
11	word parsing logic (CVE-2016-10169), this update fixes it.
12	references:
13	- https://bugs.mageia.org/show_bug.cgi?id=20205
14	- http://openwall.com/lists/oss-security/2017/01/23/4
15	- https://github.com/dbry/WavPack/commit/4bc05fc490b66ef2d45b1de26abf1455b486b0dc
16	ID: MGASA-2017-0077