Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 917612

Summary: <media-video/mediainfo-23.10 <media-libs/libmediainfo-23.10: DoS in parsing certain codecs
Product: Gentoo Security Reporter: John Helmert III <ajak>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: CONFIRMED ---    
Severity: minor CC: ajak, media-video
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B3 [glsa+ cleanup]
Package list:
Runtime testing required: ---
Bug Depends on: 929148    
Bug Blocks:    

Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-11-20 02:40:42 UTC 
In the release notes:

+ I754, AVC&HEVC: fix risk of crash with some streams

https://github.com/MediaArea/MediaInfoLib/releases/tag/v23.09
https://github.com/MediaArea/MediaInfo/releases/tag/v23.09
Comment 1 Larry the Git Cow gentoo-dev 2023-11-24 14:31:04 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a0a6e594708f4e3476a9986dfc6de96ade65b23b

commit a0a6e594708f4e3476a9986dfc6de96ade65b23b
Author:     Pacho Ramos <pacho@gentoo.org>
AuthorDate: 2023-11-24 13:55:11 +0000
Commit:     Pacho Ramos <pacho@gentoo.org>
CommitDate: 2023-11-24 14:30:29 +0000

    media-libs/libmediainfo: add 23.10
    
    Closes: https://bugs.gentoo.org/917612
    Signed-off-by: Pacho Ramos <pacho@gentoo.org>

 media-libs/libmediainfo/Manifest                  |  1 +
 media-libs/libmediainfo/libmediainfo-23.10.ebuild | 92 +++++++++++++++++++++++
 2 files changed, 93 insertions(+)
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-11-24 18:08:34 UTC 
Don't forget to leave security bugs open after bumping! Please stabilize when ready.
Comment 3 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2024-04-21 00:10:11 UTC 
Please cleanup
Comment 4 Larry the Git Cow gentoo-dev 2024-05-04 09:28:13 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=3f0835df81643a2316838781489d1870a408b6c9

commit 3f0835df81643a2316838781489d1870a408b6c9
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-05-04 09:27:38 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-05-04 09:28:09 +0000

    [ GLSA 202405-09 ] MediaInfo, MediaInfoLib: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/778992
    Bug: https://bugs.gentoo.org/836564
    Bug: https://bugs.gentoo.org/875374
    Bug: https://bugs.gentoo.org/917612
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202405-09.xml | 55 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 55 insertions(+)