Linux · Security advisory · April 28, 2020

RHSA-2020:1581: Security update for 2 packages

RHSA-2020:1581, released April 28, 2020, fixes 6 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0295
87th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 0 Routine 6

Fixed package versions

ProductReleaseFixed in
wavpackRHEL 80:5.1.0-15.el8
wavpack-develRHEL 80:5.1.0-15.el8

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Routine CVE-2019-11498 wavpack-devel: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid com... 6.5 0.0295 None reported
Routine CVE-2018-19841 wavpack-devel: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid com... 5.5 0.0246 None reported
Routine CVE-2018-19840 wavpack: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid com... 5.5 0.0223 None reported
Routine CVE-2019-1010315 wavpack: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid com... 5.5 0.0155 None reported
Routine CVE-2019-1010319 wavpack: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid com... 5.5 0.0152 None reported
Routine CVE-2019-1010317 wavpack: WavPack is a completely open audio compression format providing lossless, high-quality lossy, and a unique hybrid com... 5.5 0.0147 None reported
Showing 1 to 6 of 6 1