Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 161558 - media-video/xine-ui: Format string vulns
Summary: media-video/xine-ui: Format string vulns
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard: A2 [glsa] DerCorny
Keywords:
: 161829 (view as bug list)
Depends on:
Blocks:
 
Reported: 2007-01-11 15:20 UTC by Stefan Cornelius (RETIRED)
Modified: 2007-01-23 22:37 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Cornelius (RETIRED) gentoo-dev 2007-01-11 15:20:27 UTC 
xine-ui contains format string vulns, one example is the errors_create_window() function in errors.c.

Reproducible: Always
Comment 1 Stefan Cornelius (RETIRED) gentoo-dev 2007-01-11 15:23:15 UTC 
arches, please test and stable ~0.99.5_pre20060716, thank you
Comment 2 Markus Rothe (RETIRED) gentoo-dev 2007-01-11 16:31:57 UTC 
ppc64 stable
Comment 3 Gustavo Zacarias (RETIRED) gentoo-dev 2007-01-11 17:04:47 UTC 
sparc stable.
Comment 4 Tobias Scherbaum (RETIRED) gentoo-dev 2007-01-11 18:34:42 UTC 
ppc stable
Comment 5 Malcolm Lashley (RETIRED) gentoo-dev 2007-01-11 20:33:17 UTC 
amd64 stable
Comment 6 Christian Faulhammer (RETIRED) gentoo-dev 2007-01-11 22:07:10 UTC 
x86 stable
Comment 7 Stefan Cornelius (RETIRED) gentoo-dev 2007-01-12 22:23:47 UTC 
*** Bug 161829 has been marked as a duplicate of this bug. ***
Comment 8 Jeroen Roovers (RETIRED) gentoo-dev 2007-01-14 17:20:04 UTC 
No stable version for HPPA.
Comment 9 Bryan Østergaard (RETIRED) gentoo-dev 2007-01-16 17:58:07 UTC 
Alpha done.
Comment 10 Raphael Marichez (Falco) (RETIRED) gentoo-dev 2007-01-17 22:36:43 UTC 
Finally adding maintainer just for information :)
Comment 11 Raphael Marichez (Falco) (RETIRED) gentoo-dev 2007-01-23 22:37:18 UTC 
GLSA-200701-18