Bugzilla – Bug 1133157
VUL-0: CVE-2019-11372: mediainfo: out-of-bounds read in function MediaInfoLib:File__Tags_Helper:Synched_Test in Tag/File__Tags.cpp
Last modified: 2024-06-30 19:05:04 UTC
rh#1701840 An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. References: https://github.com/MediaArea/MediaInfoLib/pull/1111 https://sourceforge.net/p/mediainfo/bugs/1101/ References: https://bugzilla.redhat.com/show_bug.cgi?id=1701840 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11372 http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-11372.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11372 http://www.cvedetails.com/cve/CVE-2019-11372/ https://github.com/MediaArea/MediaInfoLib/pull/1111 https://sourceforge.net/p/mediainfo/bugs/1101/
This is an autogenerated message for OBS integration: This bug (1133157) was mentioned in https://build.opensuse.org/request/show/697265 15.1 / libmediainfo https://build.opensuse.org/request/show/697266 15.1 / mediainfo https://build.opensuse.org/request/show/697269 15.0+42.3+Backports:SLE-15 / libmediainfo
Update submitted.
This is an autogenerated message for OBS integration: This bug (1133157) was mentioned in https://build.opensuse.org/request/show/697452 Factory / libmediainfo
openSUSE-SU-2019:1629-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1133156,1133157 CVE References: CVE-2019-11372,CVE-2019-11373 Sources used: openSUSE Leap 42.3 (src): libmediainfo-0.7.96-2.3.1 openSUSE Leap 15.0 (src): libmediainfo-18.03-lp150.2.3.1 openSUSE Backports SLE-15 (src): libmediainfo-18.03-bp150.3.3.1
openSUSE-SU-2019:1658-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1133156,1133157 CVE References: CVE-2019-11372,CVE-2019-11373 Sources used: openSUSE Backports SLE-15 (src): libmediainfo-18.03-bp150.3.6.1
This is automated batch bugzilla cleanup. The openSUSE 42.3 changed to end-of-life (EOL [1]) status. As such it is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of openSUSE (At this moment openSUSE Leap 15.1, 15.0 and Tumbleweed) please feel free to reopen this bug against that version (!you must update the "Version" component in the bug fields, do not just reopen please), or alternatively create a new ticket. Thank you for reporting this bug and we are sorry it could not be fixed during the lifetime of the release. [1] https://en.opensuse.org/Lifetime
actually fixed
openSUSE-SU-2019:1889-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1133156,1133157 CVE References: CVE-2019-11372,CVE-2019-11373 Sources used: openSUSE Backports SLE-15-SP1 (src): libmediainfo-18.03-bp151.4.3.2
This is an autogenerated message for OBS integration: This bug (1133157) was mentioned in https://build.opensuse.org/request/show/1184117 Factory / libmediainfo