Frugalware

Please read the http://frugalware.org/docs/bugs page if you are new to bugreporting!
Tasklist

FS#3027 - [SEC] xine-lib

Attached to Project: Frugalware
Opened by András Vöröskői (voroskoi) - Wednesday, 23 April 2008, 21:09 GMT+2
Last edited by Miklos Vajna (vmiklos) - Monday, 05 May 2008, 14:36 GMT+2
Task Type Bug Report
Category X libraries
Status Closed
Assigned To No-one
Operating System x86_64 / i686
Severity Medium
Priority Normal
Reported Version -current
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No
This task depends upon

Closed by  Miklos Vajna (vmiklos)
Monday, 05 May 2008, 14:36 GMT+2
Reason for closing:  Fixed
Additional comments about closing:  FSA438
Comment by András Vöröskői (voroskoi) - Thursday, 24 April 2008, 12:34 GMT+2
patch: http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=d0ced21e0cf2080e2d4c05e6009b76c7f42211f5;style=gitweb
Comment by András Vöröskői (voroskoi) - Thursday, 24 April 2008, 14:47 GMT+2
Crazy,

I'd like to use this patch to fix this issue: http://yugo.frugalware.org/~voroskoi/CVE-2008-1878.diff

Well, the first hunk should be enough, but xine crashes for me with that too, so i've used hg diff -r 9297 -r 9307 > CVE-2008-1878.diff to create this patch. If you are OK with it i'll push it to current.

I've tested it on http://milw0rm.com/exploits/5458.
Comment by András Vöröskői (voroskoi) - Thursday, 24 April 2008, 23:41 GMT+2
  • Field changed: Status (Unconfirmed → Fixed in -current)
  • Assignment removed
xine-lib-1.1.12-2-i686 upped
Comment by András Vöröskői (voroskoi) - Friday, 25 April 2008, 21:39 GMT+2
  • Field changed: Status (Fixed in -current → Waiting for syncpkgd)
xine-lib-1.1.11-1kalgan3-i686 upped

Loading...