Summary: | <media-libs/libsndfile-1.0.19 CAF Processing Integer Overflow Vulnerability (CVE-2009-0186) | ||||||
---|---|---|---|---|---|---|---|
Product: | Gentoo Security | Reporter: | Robert Buchholz (RETIRED) <rbu> | ||||
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> | ||||
Status: | RESOLVED FIXED | ||||||
Severity: | normal | CC: | sound, vladimir | ||||
Priority: | High | ||||||
Version: | unspecified | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
URL: | http://secunia.com/advisories/33980/ | ||||||
Whiteboard: | B2 [glsa] | ||||||
Package list: | Runtime testing required: | --- | |||||
Attachments: |
|
Description
Robert Buchholz (RETIRED)
2009-03-04 14:56:02 UTC
Created attachment 183894 [details, diff]
Patch to libsndfile-1.0.18-r1.ebuild to create libsndfile-1.0.19.ebuild
Rename of 1.0.18-r1 ebuild almost works, but the m4 macro patch has been applied upstream and so has to be removed from the ebuild. Attached patch makes the necessary change, which then builds correctly on x86.
(In reply to comment #1) > Created an attachment (id=183894) [edit] > Patch to libsndfile-1.0.18-r1.ebuild to create libsndfile-1.0.19.ebuild > > Rename of 1.0.18-r1 ebuild almost works, but the m4 macro patch has been > applied upstream and so has to be removed from the ebuild. Attached patch makes > the necessary change, which then builds correctly on x86. bumped, thanks Arches, please test and mark stable: =media-libs/libsndfile-1.0.19 Target keywords : "alpha amd64 arm hppa ia64 ppc ppc64 sh sparc x86" fails testsuite here on amd64/x86, older versions had it disabled: ========================== ./lossy_comp_test aiff_ima ========================== test_float_peak : peak_float.aiff ......... ok read_write_peak_test : rw_peak.aiff ............ ok update_header_test : header.aiff ............. ok update_seek_short_test : header_short.aiff ....... ok update_seek_int_test : header_int.aiff ......... ok update_seek_float_test : header_float.aiff ....... ok update_seek_double_test : header_double.aiff ...... ok header_shrink_test : header_shrink.wav ....... ok extra_header_test : extra.aiff .............. ok zero_data_test : zerolen.aiff ............ ok filesystem_full_test : /dev/full ............... Line 300 : Error bad error string : System error : Permission denied.. make[1]: *** [check] Error 1 make[1]: Leaving directory `/var/tmp/portage/media-libs/libsndfile-1.0.19/work/libsndfile-1.0.19/tests' make: *** [check-recursive] Error 1 * * ERROR: media-libs/libsndfile-1.0.19 failed. * Call stack: * ebuild.sh, line 49: Called src_test * environment, line 2708: Called _eapi0_src_test * ebuild.sh, line 616: Called die * The specific snippet of code: * hasq test $FEATURES && die "Make check failed. See above for details." * The die message: * Make check failed. See above for details. (In reply to comment #4) > zero_data_test : zerolen.aiff ............ ok > filesystem_full_test : /dev/full ............... > weird, I had exactly this failure with the .18 pre releases but when I bumped it to the .18 it wasn't failing anymore; can you try to see if upgrading your sandbox helps? I'll probably disable this test for now but I'd like to know why :) ppc64 done On alpha, I get this: >>> Emerging (1 of 1) sci-chemistry/gromacs-4.0.3 * gromacs-4.0.3.tar.gz RMD160 SHA1 SHA256 size ;-) ... [ ok ] * checking ebuild checksums ;-) ... [ ok ] * checking auxfile checksums ;-) ... [ ok ] * checking miscfile checksums ;-) ... [ ok ] * You need one of these Fortran Compilers: g77 gfortran ifc * Installed are: gfortran >>> Unpacking source... >>> Unpacking gromacs-4.0.3.tar.gz to /var/tmp/portage/sci-chemistry/gromacs-4.0.3/work * Running eautoreconf in '/var/tmp/portage/sci-chemistry/gromacs-4.0.3/work/gromacs-4.0.3' ... * Running aclocal ... [ ok ] * Running true --copy --force --install --automake ... [ ok ] * Running aclocal ... [ ok ] * Running autoconf ... [ ok ] * Running autoheader ... [ ok ] * Running automake --add-missing --copy --foreign ... [ ok ] * Running elibtoolize in: gromacs-4.0.3/config * Applying install-sh-1.5.4.patch ... * Applying portage-1.5.10.patch ... * Applying sed-1.5.6.patch ... >>> Source unpacked in /var/tmp/portage/sci-chemistry/gromacs-4.0.3/work >>> Compiling source in /var/tmp/portage/sci-chemistry/gromacs-4.0.3/work ... * * ERROR: sci-chemistry/gromacs-4.0.3 failed. * Call stack: * ebuild.sh, line 49: Called src_compile * environment, line 3075: Called die * The specific snippet of code: * die "If you must run gromacs without sse (not recommended) gfortran will not work."; * The die message: * If you must run gromacs without sse (not recommended) gfortran will not work. * * If you need support, post the topmost build error, and the call stack if relevant. * A complete build log is located at '/var/log/portage/sci-chemistry:gromacs-4.0.3:20090312-223608.log'. * The ebuild environment file is located at '/var/tmp/portage/sci-chemistry/gromacs-4.0.3/temp/environment'. * >>> Failed to emerge sci-chemistry/gromacs-4.0.3, Log file: >>> '/var/log/portage/sci-chemistry:gromacs-4.0.3:20090312-223608.log' Naturally, I *can't* use SSE. So where do I get g77? ifc is right out for obvious reasons. Gah. Wrong browser tab. Nevermind me. Stable for HPPA. (In reply to comment #5) > (In reply to comment #4) > > zero_data_test : zerolen.aiff ............ ok > > filesystem_full_test : /dev/full ............... > > > > weird, I had exactly this failure with the .18 pre releases but when I bumped > it to the .18 it wasn't failing anymore; can you try to see if upgrading your > sandbox helps? I'll probably disable this test for now but I'd like to know why > :) tests pass with sys-apps/sandbox-1.6 Stable on alpha. ppc done arm/ia64/sh/sparc stable, since tests failures aren't a blocker and previous versions had it restricted... I'd like to move this bug to [glsa], however amd64 and x86 are still on ~arch. Either we need to RESTRICT=test or send a beer over to Markus, so he'll be happy. x86 stable, now its amd64 issue :P amd64 stable, all arches done. GLSA request filed. GLSA 200904-16 |