==========================================================================
Ubuntu Security Notice USN-4682-1
January 06, 2021

wavpack vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 20.10
– Ubuntu 20.04 LTS
– Ubuntu 18.04 LTS

Summary:

WavPack could be made to execute arbitrary code or crash if it received a specially
crafted WAV file.

Software Description:
– wavpack: audio codec (lossy and lossless) – encoder and decoder

Details:

It was discovered that WavPack incorrectly handled certain WAV files.
An attacker could possibly use this issue to execute arbitrary code or
cause a crash.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
wavpack 5.3.0-1ubuntu0.1

Ubuntu 20.04 LTS:
wavpack 5.2.0-1ubuntu0.1

Ubuntu 18.04 LTS:
wavpack 5.1.0-2ubuntu1.5

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4682-1
CVE-2020-35738

Package Information:
https://launchpad.net/ubuntu/+source/wavpack/5.3.0-1ubuntu0.1
https://launchpad.net/ubuntu/+source/wavpack/5.2.0-1ubuntu0.1
https://launchpad.net/ubuntu/+source/wavpack/5.1.0-2ubuntu1.5
—–BEGIN PGP SIGNATURE—–
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=B6UK
—–END PGP SIGNATURE—–
—