[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#993375: gtkpod: CVE-2021-37231 - stack-buffer overflow in embedded AtomicParsley code, APar_readX



Package: gtkpod
Version: 2.1.5-8
Severity: important
Tags: security

gtkpod embeds a vulnerable version of AtomicParsley, however, the data file used to
test atomicparsley upstream is not recognised by gtkpod.

https://github.com/wez/atomicparsley/issues/30

https://sources.debian.org/src/gtkpod/2.1.5-8/libs/atomic-parsley/AP_AtomExtracts.cpp/#L1117

See also #993372


Reply to: