Ubuntu
xine-lib package

  1. Bug #322834
  2. Comment #5

Comment 5 for bug 322834

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package xine-lib - 1.1.7-1ubuntu1.5

---------------
xine-lib (1.1.7-1ubuntu1.5) gutsy-security; urgency=low

  * REGRESSION: Broken size checks in CVE-2008-5239 input plugins patch
    (LP: #322834)
    - src/input/input_*.c: fix the size checks broken by the previous
      security update.
    - http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=b11cc37934629a2965859163db6095fbbe2b44be;style=gitweb
    - CVE-2008-5239
  * SECURITY UPDATE: Integer overflow in the 4xm demuxer
    - src/demuxers/demux_4xm.c: Make sure we don't overflow
      fourxm->track_count.
    - http://hg.debian.org/hg/xine-lib/xine-lib?cmd=changeset;node=ba872682eba8a10217c48b7fe21f0fa763ef4af3;style=gitweb
    - CVE-2009-0698

 -- Marc Deslauriers <email address hidden> Tue, 24 Mar 2009 10:16:54 -0400