Lucene search

K
mageiaGentoo FoundationMGASA-2014-0071
HistoryFeb 16, 2014 - 4:54 p.m.

Updated xbmc package fixes a security vulnerability

2014-02-1616:54:48
Gentoo Foundation
advisories.mageia.org
10

0.001 Low

EPSS

Percentile

46.5%

Due to flaws in the embedded copy of libDCR, a fork of dcraw.c, in the embedded copy of CxImage, opening a specially crafted photo file could trigger a division by zero, an infinite loop, or a null pointer dereference, resulting in a denial of service (CVE-2013-1438). This update fixes those flaws. XBMC is also updated to a newer bugfix-only release, version 12.3. It contains fixes to various issues, including: - several PVR related bugs - memory leaks - audio channel mapping - possible crash on progress dialog and more. Additionally, this update fixes a compatibility issue on Mageia 4 affecting AC-3 transcoding, which prevented, for example, multichannel playback of AAC 5.1 files over S/PDIF or stereo-only HDMI devices. The PVR addons have also been updated.

OSVersionArchitecturePackageVersionFilename
Mageia3noarchxbmc< 12.3-1.1xbmc-12.3-1.1.mga3
Mageia4noarchxbmc< 12.3-1.1xbmc-12.3-1.1.mga4