portage-ng / portage / media-video / atomicparsley / 0.9.6_p20210715_p151551
version « ‹ 0.9.6_p20210715_p151551 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference media-video/atomicparsley · none place version 0.9.6_p20210715_p151551 in a vulnerable range
▸ GLSA 202305-01 AtomicParsley: Multiple Vulnerabilities this version unaffected normal remote 2023-05-03

Multiple vulnerabilities have been discovered in AtomicParsley, the worst of which could result in arbitrary code execution.

Announced
2023-05-03
Revised
2023-05-03
Access
remote
Bugs
#806845
Advisory
https://security.gentoo.org/glsa/202305-01

Affected packages

PackageArchVulnerableUnaffected
media-video/atomicparsley*< 0.9.6_p20210715_p151551>= 0.9.6_p20210715_p151551
media-video/atomicparsley-wez*<= 0.9.6—

Background

AtomicParsley is a command line program for manipulating iTunes-style metadata in MPEG4 files.

Description

Multiple vulnerabilities have been discovered in AtomicParsley. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

Users can pass only trusted input to AtomicParsley.

Resolution

Previously, the "wez" AtomicParsley fork was packaged in Gentoo as media-video/atomicparsley-wez. This fork is now packaged as media-video/atomicparsley, so users of the fork's package should now depclean it:

# emerge --ask --depclean "media-video/atomicparsley-wez"

All AtomicParsley users should upgrade to the latest version, which is a packaging of the "wez" AtomicParsley fork:

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-video/atomicparsley-0.9.6_p20210715_p151551"

References