Bugzilla – Bug 1133156
VUL-0: CVE-2019-11373: mediainfo: out-of-bounds read in function File__Analyze:Get_L8 in File__Analyze_Buffer.cpp
Last modified: 2024-06-30 19:05:02 UTC
rh#1701844 An out-of-bounds read in File__Analyze::Get_L8 in File__Analyze_Buffer.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash. Reference: https://github.com/MediaArea/MediaInfoLib/pull/1111 https://sourceforge.net/p/mediainfo/bugs/1101/ References: https://bugzilla.redhat.com/show_bug.cgi?id=1701844 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11373 http://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-11373.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11373 http://www.cvedetails.com/cve/CVE-2019-11373/ https://github.com/MediaArea/MediaInfoLib/pull/1111 https://sourceforge.net/p/mediainfo/bugs/1101/
Updates submitted.
This is an autogenerated message for OBS integration: This bug (1133156) was mentioned in https://build.opensuse.org/request/show/697265 15.1 / libmediainfo https://build.opensuse.org/request/show/697266 15.1 / mediainfo https://build.opensuse.org/request/show/697269 15.0+42.3+Backports:SLE-15 / libmediainfo
This is an autogenerated message for OBS integration: This bug (1133156) was mentioned in https://build.opensuse.org/request/show/697452 Factory / libmediainfo
openSUSE-SU-2019:1629-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1133156,1133157 CVE References: CVE-2019-11372,CVE-2019-11373 Sources used: openSUSE Leap 42.3 (src): libmediainfo-0.7.96-2.3.1 openSUSE Leap 15.0 (src): libmediainfo-18.03-lp150.2.3.1 openSUSE Backports SLE-15 (src): libmediainfo-18.03-bp150.3.3.1
openSUSE-SU-2019:1658-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1133156,1133157 CVE References: CVE-2019-11372,CVE-2019-11373 Sources used: openSUSE Backports SLE-15 (src): libmediainfo-18.03-bp150.3.6.1
This is automated batch bugzilla cleanup. The openSUSE 42.3 changed to end-of-life (EOL [1]) status. As such it is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of openSUSE (At this moment openSUSE Leap 15.1, 15.0 and Tumbleweed) please feel free to reopen this bug against that version (!you must update the "Version" component in the bug fields, do not just reopen please), or alternatively create a new ticket. Thank you for reporting this bug and we are sorry it could not be fixed during the lifetime of the release. [1] https://en.opensuse.org/Lifetime
actually fixed
openSUSE-SU-2019:1889-1: An update that fixes two vulnerabilities is now available. Category: security (moderate) Bug References: 1133156,1133157 CVE References: CVE-2019-11372,CVE-2019-11373 Sources used: openSUSE Backports SLE-15-SP1 (src): libmediainfo-18.03-bp151.4.3.2
This is an autogenerated message for OBS integration: This bug (1133156) was mentioned in https://build.opensuse.org/request/show/1184117 Factory / libmediainfo