Bug 93136

Summary:	media-libs/win32codecs
Product:	Gentoo Security	Reporter:	Sune Kloppenborg Jeppesen (RETIRED) <jaervosz>
Component:	Auditing	Assignee:	Gentoo Security <security>
Status:	RESOLVED CANTFIX
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Other
Whiteboard:
Package list:		Runtime testing required:	---

Description Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-05-18 22:59:15 UTC

Taviso/Tigger could you check up on the win32codecs issue? 

From bug #92229:

------- Additional Comment #1 From  Carsten Lohrke 2005-05-11 09:23 PDT [reply] -------   
Since it is related, I'd like to ask, if win32codecs is under control. I'm rather suspecious about its security status, since it includes quite a lot of libraries, a mix of realplayer 8 and 10 in the among them. And the mplayer.hq Changelog is everything else than detailed.

Comment 1 Tavis Ormandy (RETIRED) gentoo-dev

2005-05-29 01:26:36 UTC

marking CANTFIX, as the coment says the ChangeLog is not helpful and the source 
is not available for these proprietary components. However, I'd be surprised if 
the codecs themselves were responsible for the security vulnerability.