Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug
Bug#: 249391
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Gentoo Security <security@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Alexis Ballier <aballier@gentoo.org>
Add CC:
CC:
Remove selected CCs
URL:
Summary:
Status Whiteboard:
Keywords:
Flags: Requestee:
 
 
  ()

Filename Description Type Creator Created Size Actions
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 249391 depends on: Show dependency tree
Bug 249391 blocks:

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2008-11-30 14:57 0000 
http://www.videolan.org/security/sa0811.html

Details

When parsing the header of an invalid Real Media file an integer overflow might
occur then trigger a stack-based buffer overflows.

------- Comment #1 From Stefan Behte 2008-11-30 18:06:26 0000 ------- 
Adding "corresponding evaluation" to whiteboard, adding herd
(http://www.gentoo.org/security/en/vulnerability-policy.xml).

------- Comment #2 From Alexis Ballier 2008-12-08 09:11:00 0000 ------- 
0.9.8a is in the tree btw

------- Comment #3 From Stefan Behte 2008-12-09 22:34:09 0000 ------- 
Arches, please test and mark stable:
=media-video/vlc-0.9.8a
Target keywords : "alpha amd64 ppc sparc x86"

------- Comment #4 From Markus Meier 2008-12-10 22:02:04 0000 ------- 
amd64/x86 stable

------- Comment #5 From Tobias Scherbaum 2008-12-13 13:46:55 0000 ------- 
ppc stable

------- Comment #6 From Tobias Klausmann 2008-12-13 19:17:33 0000 ------- 
stable on alpha

------- Comment #7 From Friedrich Oslage 2008-12-13 21:09:20 0000 ------- 
sparc stable

------- Comment #8 From Tobias Heinlein 2008-12-15 14:04:59 0000 ------- 
GLSA request filed.

------- Comment #9 From Tobias Heinlein 2008-12-25 01:17:06 0000 ------- 
GLSA 200812-24, thanks everyone.
Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug