Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 9: FEDORA-2008-7512 Critical: Xine-Lib DoS and Buffer Overflow

fedora
Calendar Grey September 10, 2008
Dist Fedora Esm H88
The recent patch rectifies Denial of Service vulnerabilities linked to faulty Ogg file handling and mitigates buffer overflow issues within the xine-lib framework for Fedora 9.
This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files (CVE-2008-3231) - multiple possible buffer overflows detailed in oCERT-2008-008 For more d...

Summary

This package contains the Xine library. Xine is a free multimedia player.

It can play back various media. It also decodes multimedia files from local

disk drives, and displays multimedia streamed over the Internet. It

interprets many of the most common multimedia formats available - and some

of the most uncommon formats, too. --with/--without rpmbuild options

(some default values depend on target distribution): aalib, caca, directfb,

imagemagick, freetype, antialiasing (with freetype), pulseaudio, xcb.

Update Information:

This release fixes multiple bugs and security issues: - DoS via corrupted Ogg files (CVE-2008-3231) - multiple possible buffer overflows detailed in oCERT-2008-008 For more details, see: ;group_id=9655 http://ocert.org/advisories/ocert-2008-008.html NOTE: A coordinated release with 3rd-party repos was not possible, so this update may result in dependency issues with currently-installed xine-lib-extras-* rpms. This temporary problem will be rectified asap.

Topics%20covered

Topics Covered

security advisory fedora buffer overflow software update DoS xine-lib

Change Log

* Wed Aug 20 2008 Rex Dieter - 1.1.15-1 - xine-lib-1.1.15, plugin ABI 1.24 (rh#455752, CVE-2008-3231) - Obsoletes: -arts (f9+) * Sun Apr 27 2008 Kevin Kofler - 1.1.12-3 - rebuild for new ImageMagick (6.4.0.10)

References


[ 1 ] Bug #456057 - CVE-2008-3231 xine-lib: crash on zzuf test case lol-ffplay.ogg https://bugzilla.redhat.com/show_bug.cgi?id=456057

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update xine-lib' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xine-lib
Product: Fedora 9
Version: 1.1.15
Release: 1.fc9
URL: http://xinehq.de/
Summary: Xine library

Topics%20covered

Topics Covered

security advisory fedora buffer overflow software update DoS xine-lib

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here