diff options
Diffstat (limited to 'zarb-ml/mageia-dev/2012-May/015651.html')
-rw-r--r-- | zarb-ml/mageia-dev/2012-May/015651.html | 114 |
1 files changed, 114 insertions, 0 deletions
diff --git a/zarb-ml/mageia-dev/2012-May/015651.html b/zarb-ml/mageia-dev/2012-May/015651.html new file mode 100644 index 000000000..69cc41066 --- /dev/null +++ b/zarb-ml/mageia-dev/2012-May/015651.html @@ -0,0 +1,114 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-dev] taglib CVE for MP4 files + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20taglib%20CVE%20for%20MP4%20files&In-Reply-To=%3C20120514222127.3f49c08e%40lap.shlomifish.org%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="015648.html"> + <LINK REL="Next" HREF="015649.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-dev] taglib CVE for MP4 files</H1> + <B>Shlomi Fish</B> + <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20taglib%20CVE%20for%20MP4%20files&In-Reply-To=%3C20120514222127.3f49c08e%40lap.shlomifish.org%3E" + TITLE="[Mageia-dev] taglib CVE for MP4 files">shlomif at shlomifish.org + </A><BR> + <I>Mon May 14 21:21:27 CEST 2012</I> + <P><UL> + <LI>Previous message: <A HREF="015648.html">[Mageia-dev] taglib CVE for MP4 files +</A></li> + <LI>Next message: <A HREF="015649.html">[Mageia-dev] sysadmin please remove tuxguitar-1.2-7.1.mga1 +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#15651">[ date ]</a> + <a href="thread.html#15651">[ thread ]</a> + <a href="subject.html#15651">[ subject ]</a> + <a href="author.html#15651">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>Hi David, + +On Mon, 14 May 2012 11:43:46 -0700 (PDT) +David Walser <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">luigiwalser at yahoo.com</A>> wrote: + +><i> taglib 1.7.2 was issued to fix a minor security DoS issue due to a divide by zero error in the MP4 file decoder. +</I>><i> +</I>><i> I built it in updates_testing but I don't have an MP4 file to test it with. +</I>><i> +</I>><i> If interested people could test it, it could be pushed to updates. Thanks. +</I>><i> +</I> +Thanks for your work. I have some .mp4s files (mostly videos) around, which I +have downloaded from YouTube using youtube-dl (and you can too). But what +should I do to test that the bug was fixed? Can you provide instructions? + +Regards, + + Shlomi Fish + +-- +----------------------------------------------------------------- +Shlomi Fish <A HREF="http://www.shlomifish.org/">http://www.shlomifish.org/</A> +Understand what Open Source is - <A HREF="http://shlom.in/oss-fs">http://shlom.in/oss-fs</A> + +Tcl is Lisp on drugs. Using strings instead of S‐expressions for closures is +Evil with one of those gigantic E’s you can find at the beginning of chapters. + +Please reply to list if it's a mailing list post - <A HREF="http://shlom.in/reply">http://shlom.in/reply</A> . +</PRE> + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="015648.html">[Mageia-dev] taglib CVE for MP4 files +</A></li> + <LI>Next message: <A HREF="015649.html">[Mageia-dev] sysadmin please remove tuxguitar-1.2-7.1.mga1 +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#15651">[ date ]</a> + <a href="thread.html#15651">[ thread ]</a> + <a href="subject.html#15651">[ subject ]</a> + <a href="author.html#15651">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev +mailing list</a><br> +</body></html> |