Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 917612 - <media-video/mediainfo-23.10 <media-libs/libmediainfo-23.10: DoS in parsing certain codecs
Summary: <media-video/mediainfo-23.10 <media-libs/libmediainfo-23.10: DoS in parsing c...
Status: CONFIRMED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor
Assignee: Gentoo Security
URL:
Whiteboard: B3 [glsa+ cleanup]
Keywords:
Depends on: 929148
Blocks:
  Show dependency tree
 
Reported: 2023-11-20 02:40 UTC by John Helmert III
Modified: 2024-07-05 17:49 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-11-20 02:40:42 UTC
In the release notes:

+ I754, AVC&HEVC: fix risk of crash with some streams

https://github.com/MediaArea/MediaInfoLib/releases/tag/v23.09
https://github.com/MediaArea/MediaInfo/releases/tag/v23.09
Comment 1 Larry the Git Cow gentoo-dev 2023-11-24 14:31:04 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a0a6e594708f4e3476a9986dfc6de96ade65b23b

commit a0a6e594708f4e3476a9986dfc6de96ade65b23b
Author:     Pacho Ramos <pacho@gentoo.org>
AuthorDate: 2023-11-24 13:55:11 +0000
Commit:     Pacho Ramos <pacho@gentoo.org>
CommitDate: 2023-11-24 14:30:29 +0000

    media-libs/libmediainfo: add 23.10
    
    Closes: https://bugs.gentoo.org/917612
    Signed-off-by: Pacho Ramos <pacho@gentoo.org>

 media-libs/libmediainfo/Manifest                  |  1 +
 media-libs/libmediainfo/libmediainfo-23.10.ebuild | 92 +++++++++++++++++++++++
 2 files changed, 93 insertions(+)
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-11-24 18:08:34 UTC
Don't forget to leave security bugs open after bumping! Please stabilize when ready.
Comment 3 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2024-04-21 00:10:11 UTC
Please cleanup
Comment 4 Larry the Git Cow gentoo-dev 2024-05-04 09:28:13 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=3f0835df81643a2316838781489d1870a408b6c9

commit 3f0835df81643a2316838781489d1870a408b6c9
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-05-04 09:27:38 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-05-04 09:28:09 +0000

    [ GLSA 202405-09 ] MediaInfo, MediaInfoLib: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/778992
    Bug: https://bugs.gentoo.org/836564
    Bug: https://bugs.gentoo.org/875374
    Bug: https://bugs.gentoo.org/917612
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202405-09.xml | 55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)
Comment 5 Larry the Git Cow gentoo-dev 2024-07-05 17:49:29 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a9fcf0343f57dc4217642142c84335e8d78963ea

commit a9fcf0343f57dc4217642142c84335e8d78963ea
Author:     Pacho Ramos <pacho@gentoo.org>
AuthorDate: 2024-07-05 17:28:33 +0000
Commit:     Pacho Ramos <pacho@gentoo.org>
CommitDate: 2024-07-05 17:48:54 +0000

    media-video/mediainfo: drop 22.09, 23.03, 23.04
    
    Bug: https://bugs.gentoo.org/917612
    Signed-off-by: Pacho Ramos <pacho@gentoo.org>

 media-video/mediainfo/Manifest               |  3 -
 media-video/mediainfo/mediainfo-22.09.ebuild | 89 ---------------------------
 media-video/mediainfo/mediainfo-23.03.ebuild | 92 ----------------------------
 media-video/mediainfo/mediainfo-23.04.ebuild | 92 ----------------------------
 4 files changed, 276 deletions(-)