From 1be510f9529cb082f802408b472a77d074b394c0 Mon Sep 17 00:00:00 2001 From: Nicolas Vigier Date: Sun, 14 Apr 2013 13:46:12 +0000 Subject: Add zarb MLs html archives --- zarb-ml/mageia-dev/2012-May/015651.html | 114 ++++++++++++++++++++++++++++++++ 1 file changed, 114 insertions(+) create mode 100644 zarb-ml/mageia-dev/2012-May/015651.html (limited to 'zarb-ml/mageia-dev/2012-May/015651.html') diff --git a/zarb-ml/mageia-dev/2012-May/015651.html b/zarb-ml/mageia-dev/2012-May/015651.html new file mode 100644 index 000000000..69cc41066 --- /dev/null +++ b/zarb-ml/mageia-dev/2012-May/015651.html @@ -0,0 +1,114 @@ + + + + [Mageia-dev] taglib CVE for MP4 files + + + + + + + + + +

[Mageia-dev] taglib CVE for MP4 files

+ Shlomi Fish + shlomif at shlomifish.org +
+ Mon May 14 21:21:27 CEST 2012 +

+
+ +
Hi David,
+
+On Mon, 14 May 2012 11:43:46 -0700 (PDT)
+David Walser <luigiwalser at yahoo.com> wrote:
+
+> taglib 1.7.2 was issued to fix a minor security DoS issue due to a divide by zero error in the MP4 file decoder.
+> 
+> I built it in updates_testing but I don't have an MP4 file to test it with.
+> 
+> If interested people could test it, it could be pushed to updates.  Thanks.
+> 
+
+Thanks for your work. I have some .mp4s files (mostly videos) around, which I
+have downloaded from YouTube using youtube-dl (and you can too). But what
+should I do to test that the bug was fixed? Can you provide instructions?
+
+Regards,
+
+	Shlomi Fish
+
+-- 
+-----------------------------------------------------------------
+Shlomi Fish       http://www.shlomifish.org/
+Understand what Open Source is - http://shlom.in/oss-fs
+
+Tcl is Lisp on drugs. Using strings instead of S‐expressions for closures is
+Evil with one of those gigantic E’s you can find at the beginning of chapters.
+
+Please reply to list if it's a mailing list post - http://shlom.in/reply .
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+

+ +
+More information about the Mageia-dev +mailing list
+ -- cgit v1.2.1