Skip to Content.
Sympa Menu

sm-grimoire-bugs - [SM-Grimoire-Bugs] [Bug 15158] New: mpg123 vulnerability with crafted ID3v2 tags

sm-grimoire-bugs AT lists.ibiblio.org

Subject: SourceMage Grimoire Bug List

List archive

Chronological Thread  
  • From: bugzilla-daemon AT bugs.sourcemage.org
  • To: sm-grimoire-bugs AT lists.ibiblio.org
  • Subject: [SM-Grimoire-Bugs] [Bug 15158] New: mpg123 vulnerability with crafted ID3v2 tags
  • Date: 5 Apr 2009 20:24:21 -0000

http://bugs.sourcemage.org/show_bug.cgi?id=15158

Summary: mpg123 vulnerability with crafted ID3v2 tags
Product: Codex
Version: stable grimoire
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P3
Component: audio-players
AssignedTo: sm-grimoire-bugs AT lists.ibiblio.org
ReportedBy: sobukus AT sourcemage.org



Thomas Orgis <sobukus AT sourcemage.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Flag| |fixed_in_lesser_branch+,
| |integrate_to_stable-rc_grim
| |oire?,
| |integrate_to_stable_grimoir
| |e?


The latest mpg123 fixes an issue with ID3 parsing that may be used to execute
arbitrary code, or at least crash the application.
The version in stable/-rc is vulnerable.

Therefore, I suggest to integrate the recent commit
bc02624cc5b7d5b610a9417bef84e30280bdf706 to stable/-rc.

Hm, we should post this to sm-security once the fix is in stable, right?

--
Configure bugmail: http://bugs.sourcemage.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.




Archive powered by MHonArc 2.6.24.

Top of Page