oss-sec mailing list archives

CVE Request -- libmikmod


From: Jan Lieskovsky <jlieskov () redhat com>
Date: Tue, 13 Jan 2009 15:41:50 +0100

Hello Steve,

  could you please allocate two 2008 CVE ids for the following
libmikmod issues:

A, 
mikmod, libmikmod: app crash or abort when loading/playing multiple
music files with varying number of channels
References:
https://bugzilla.redhat.com/show_bug.cgi?id=479829
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=461519

Patch:
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=mikmod.diff;att=1;bug=461519

Affected libmikmod versions:  libmikmod-3.1.9 <= x <= libmikmod-3.2.0-3.beta2.fc9 (possibly newer too)

B, 
mikmod,libmikmod: app crash when loading XM files
References:
https://bugzilla.redhat.com/show_bug.cgi?id=479833
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=476339

Patch: 
http://bugs.debian.org/cgi-bin/bugreport.cgi?msg=5;filename=31.xm-header.patch;att=1;bug=476339

Affected mikmod versions: libmikmod-3.1.11 <= x libmikmod-3.2.0-3.beta2.fc9 (possibly newer too)

Thanks, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team



Current thread: