96923 2005-06-23 23:18 0000 media-video/{helix|real}player heap overflow 2005-07-06 06:51:24 0000 1 1 1 Unclassified Gentoo Security Vulnerabilities unspecified All Other RESOLVED FIXED http://service.real.com/help/faq/security/050623_player/EN/ A2 [glsa] jaervosz P2 major --- 1 jaervosz@gentoo.org security@gentoo.org henrik@brixandersen.dk media-video@gentoo.org jaervosz@gentoo.org 2005-06-23 23:18:54 0000 A vulnerability exists when handling RealText that can result in a heap overflow. koon@gentoo.org 2005-06-24 01:18:15 0000 Upgrade to realplayer-10.0.5 and helixplayer-1.0.5 is necessary. flameeyes@gentoo.org 2005-06-24 04:22:46 0000 It doesn't seems to be released yet (also if Real's security advisory states else). flameeyes@gentoo.org 2005-06-24 15:09:29 0000 Ok committed 1.0.5 and 10.0.5. Little problem: I can't test helixplayer here as it's x86-only so I dropped the keywords until someone can test it. jaervosz@gentoo.org 2005-06-24 15:30:46 0000 Thx Diego, x86 please test and mark helixplayer-1.0.5 ~x86 realplayer-10.0.5 x86 koon@gentoo.org 2005-06-27 01:19:20 0000 x86 testing: see above comment. jaervosz@gentoo.org 2005-07-05 01:55:32 0000 x86/someone please test and mark stable ASAP. johnm@gentoo.org 2005-07-06 03:04:45 0000 marked ~x86 henrik@brixandersen.dk 2005-07-06 04:40:42 0000 Tested realplayer-10.0.5 and marked stable on x86 on request from jaervosz. koon@gentoo.org 2005-07-06 05:52:14 0000 Thx everyone, ready for GLSA koon@gentoo.org 2005-07-06 06:51:24 0000 GLSA 200507-04