media-plugins/live-2026.07.23 — Security Advisories

▸ GLSA 202407-23 LIVE555 Media Server: Multiple Vulnerabilities this version unaffected normal local and remote 2024-07-09

Multiple vulnerabilities have been discovered in LIVE555 Media Server, the worst of which could lead to a denial of service.

Announced: 2024-07-09
Revised: 2024-07-09
Access: local and remote
Bugs: #732598 #807622
Advisory: https://security.gentoo.org/glsa/202407-23

Affected packages

Package	Arch	Vulnerable	Unaffected
media-plugins/live	*	< 2021.08.24	>= 2021.08.24

Background

LIVE555 Media Server is a set of libraries for multimedia streaming.

Description

Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All LIVE555 Media Server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-plugins/live-2021.08.24"

References

▸ GLSA 202005-06 LIVE555 Media Server: Multiple vulnerabilities this version unaffected normal remote 2020-05-14

Multiple vulnerabilities have been found in LIVE555 Media Server, the worst of which could result in the arbitrary execution of code.

Announced: 2020-05-14
Revised: 2020-05-14
Access: remote
Bugs: #669276 #677276 #717722
Advisory: https://security.gentoo.org/glsa/202005-06

Affected packages

Package	Arch	Vulnerable	Unaffected
media-plugins/live	*	< 2020.03.06	>= 2020.03.06

Background

LIVE555 Media Server is a set of libraries for multimedia streaming.

Description

Multiple vulnerabilities have been discovered in LIVE555 Media Server. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All LIVE555 Media Server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-plugins/live-2020.03.06"

References

▸ GLSA 200803-22 LIVE555 Media Server: Denial of service this version unaffected normal remote 2008-03-13

A Denial of Service vulnerability has been reported in LIVE555 Media Server.

Announced: 2008-03-13
Revised: 2008-03-13
Access: remote
Bugs: #204065
Advisory: https://security.gentoo.org/glsa/200803-22

Affected packages

Package	Arch	Vulnerable	Unaffected
media-plugins/live	*	< 2008.02.08	>= 2008.02.08

Background

LIVE555 Media Server is a set of libraries for multimedia streaming.

Description

Luigi Auriemma reported a signedness error in the parseRTSPRequestString() function when processing short RTSP queries.

Impact

A remote attacker could send a specially crafted RTSP query to the vulnerable server, resulting in a crash.

Workaround

There is no known workaround at this time.

Resolution

All LIVE555 Media Server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-plugins/live-2008.02.08"

Note: Due to ABI changes, applications built against LIVE555 Media Server such as VLC or MPlayer should also be rebuilt.

References

CVE-2007-6036