Bug 455752

Summary: xine: 1.1.15 update
Product: [Fedora] Fedora Reporter: acount closed by user <a1459440>
Component: xine-libAssignee: Rex Dieter <rdieter>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: low    
Version: rawhideCC: gauret, kevin, rdieter
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://xinehq.de/index.php/releases
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-09-14 17:06:43 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 456057    

Description acount closed by user 2008-07-17 15:35:35 UTC
please, do it before fedora 10.

-thanks-

Comment 1 acount closed by user 2008-08-15 07:45:14 UTC
This release (1.1.15) contains some security fixes, notably a DoS via corrupted Ogg files (CVE-2008-3231), some related fixes, and fixes for a few possible buffer overflows: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3231

The other changes include recognition of AMR audio and Snow video.

Complete changelog: http://sourceforge.net/project/shownotes.php?release_id=619869&group_id=9655

-thanks-

Comment 2 Kevin Kofler 2008-08-15 08:12:05 UTC
Looks indeed like we'll want to upgrade to this new version ASAP, also for F9 and possibly F8 (backporting security fixes might be the other option for F8). Unfortunately, Koji is down at the moment, so we can't build anything.

Comment 3 Rex Dieter 2008-08-15 14:33:28 UTC
I'll take a look.

Comment 4 Rex Dieter 2008-08-15 15:51:44 UTC
%changelog
* Fri Aug 15 2008 Rex Dieter <rdieter> - 1.1.15-1
- xine-lib-1.1.15 (rh#455752, CVE-2008-3231)
- f9+: Obsoletes: xine-lib-arts
- move -pulseaudio into main pkg

All ready to commit/build, waiting for buildsys to come back online.

Comment 5 Fedora Update System 2008-08-22 18:57:38 UTC
xine-lib-1.1.15-1.fc9 has been submitted as an update for Fedora 9.
http://admin.fedoraproject.org/updates/xine-lib-1.1.15-1.fc9

Comment 6 Fedora Update System 2008-09-10 07:09:17 UTC
xine-lib-1.1.15-1.fc9 has been pushed to the Fedora 9 stable repository.  If problems still persist, please make note of it in this bug report.