Bug 484954

Summary:	CVE-2009-0490 audacity: stack-based buffer overflow [Fdevel]
Product:	[Fedora] Fedora	Reporter:	Vincent Danen <vdanen>
Component:	audacity	Assignee:	Gérard Milmeister <gemi>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	11	CC:	bugs.michael, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-06-21 09:51:57 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	484951

Description Vincent Danen 2009-02-10 20:35:28 UTC

Fdevel tracking bug: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes in the 'blocks' bugs.

NOTE THIS ISSUE IS CURRENTLY EMBARGOED, DO NOT MAKE PUBLIC COMMITS OR COMMENTS ABOUT THIS ISSUE.

[bug automatically created by: add-tracking-bugs]

Comment 1 Vincent Danen 2009-02-10 20:56:31 UTC

Sorry, this isn't actually embargoed so please disregard all the yelling in the previous comments.

Comment 2 Bug Zapper 2009-06-09 11:14:55 UTC

This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 3 Michael Schwendt 2009-06-21 09:51:57 UTC

Why am I (and the other co-owner) missing in the Cc field of these tickets? I'm listed as audacity co-owner in pkgdb for a long time. I've learnt about these three tickets only by visiting the pkgdb bugs page.

Something has gone wrong when filing these tickets.

[...]

Meanwhile, Audacity 1.3.7-beta is included with Fedora 9, 10, and 11 for a few months.

Comment 4 Michael Schwendt 2009-06-21 09:52:08 UTC

*** Bug 484953 has been marked as a duplicate of this bug. ***

Comment 5 Michael Schwendt 2009-06-21 09:52:10 UTC

*** Bug 484952 has been marked as a duplicate of this bug. ***