{"update": {"autokarma": false, "autotime": false, "stable_karma": 2, "stable_days": 0, "unstable_karma": -2, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "# Version 28.2.0 \"The Awakening\" 2018-10-25\n\n## Bug fixes\n\n* mkvmerge, mkvinfo, mkvextract, mkvpropedit, MKVToolNix GUI's info tool & chapter editor: fixed a case of memory being accessed after it had been freed earlier. This can be triggered by specially crafted Matroska files and lead to arbitrary code execution. The vulnerability was reported as Cisco TALOS 2018-0694 on 2018-10-25.\n\n# Version 28.1.0 \"Morning Child\" 2018-10-23\n\n## Bug fixes\n\n* mkvmerge: AV1 parser: fixed an error in the sequence header parser if neither the `reduced_still_picture_header` nor the `frame_id_numbers_present_flag` is set. Part of the fix for #2410.\n* mkvmerge: AV1 parser: when creating the `av1C` structure for the Codec Private element the sequence header OBU wasn't copied completely: its common data (type field & OBU size among others) was missing. Part of the fix for #2410.\n* mkvmerge: Matroska reader, AV1: mkvmerge will try to re-create the `av1C` data stored in Codec Private when reading AV1 from Matroska or WebM files created by mkvmerge v28.0.0. Part of the fix for #2410.\n* MKVToolNix GUI: info tool: the tool will no longer stop scanning elements when an EBML Void element is found after the first Cluster element. Fixes #2413.\n\n# Version 28.0.0 \"Voice In My Head\" 2018-10-20\n\n## New features and enhancements\n\n* mkvmerge: AV1 parser: updated the code for the finalized AV1 bitstream specification. Part of the implementation of #2261.\n* mkvmerge: AV1 packetizer: updated the code for the finalized AV1-in-Matroska & WebM mapping specification. Part of the implementation of #2261.\n* mkvmerge: AV1 support: the `--engage enable_av1` option has been removed again. Part of the implementation of #2261.\n* mkvmerge: MP4 reader: added support for AV1. Part of the implementation of #2261.\n* mkvmerge: DTS: implemented dialog normalization gain removal for extension substreams. Implements #2377.\n* mkvmerge, mkvextract: simple text subtitles: added a workaround for simple text subtitle tracks that don't contain a duration. Implements #2397.\n* mkvextract: added support for extracting AV1 to IVF. Part of the implementation of #2261.\n* mkvextract: IVF extractor (AV1, VP8, VP9): precise values will be used for the frame rate numerator & denominator header fields for certain well-known values of the track's default duration.\n* mkvmerge: VP9: mkvmerge will now create codec private data according to the VP9 codec mapping described in the WebM specifications. Implements #2379.\n* MKVToolNix GUI: automatic scaling for high DPI displays is activated if the GUI is compiled with Qt \u2265 5.6.0. Fixes #1996 and #2383.\n* MKVToolNix GUI: added a menu item (\"Help\" \u2192 \"System information\") for displaying information about the system MKVToolNix is running on in order to make debugging easier.\n* MKVToolNix GUI: multiplexer, header editor: the user can enter a list of predefined track names in the preferences. She can later select from them in \"track name\" combo box. Implements #2230.\n\n## Bug fixes\n\n* mkvmerge: JSON identification: fixed a bug when removing invalid UTF-8 data from strings before they're output as JSON. Fixes #2398.\n* mkvmerge: MP4/QuickTime reader: fixed handling of PCM audio with FourCC `in24`. Fixes #2391.\n* mkvmerge: MPEG transport stream reader, teletext subtitles: the decision whether or not to keep frames around in order to potentially merge them with the following frame is made sooner. That avoids problems if there are large gaps between teletext subtitle frames which could lead to frames being interleaved too late. Fixes #2393.\n* mkvextract: IVF extractor (AV1, VP8, VP8): the frame rate header fields weren't clamped to 16 bits properly causing wrong frame rates to be written in certain situations.\n* mkvpropedit, MKVToolNix GUI's header editor: fixed file corruption when a one-byte space must be covered with a new EBML void element but all surrounding elements have a \"size length\" field that's eight bytes long already. Fixes #2406.", "type": "security", "status": "stable", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-11-04 14:13:47", "date_modified": null, "date_approved": null, "date_testing": "2018-11-05 00:09:57", "date_stable": "2018-11-21 00:42:59", "alias": "FEDORA-EPEL-2018-cbfa290941", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2018-11-21 00:42:59", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-cbfa290941", "title": "mkvtoolnix-28.2.0-1.el7", "version_hash": "b84a828e7ae6ce516bf2dea611ce0840a548c8cd", "release": {"name": "EPEL-7", "long_name": "Fedora EPEL 7", "version": "7", "id_prefix": "FEDORA-EPEL", "branch": "epel7", "dist_tag": "epel7", "stable_tag": "epel7", "testing_tag": "epel7-testing", "candidate_tag": "epel7-testing-candidate", "pending_signing_tag": "epel7-signing-pending", "pending_testing_tag": "epel7-testing-pending", "pending_stable_tag": "epel7-pending", "override_tag": "epel7-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by rathann. ", "timestamp": "2018-11-04 14:13:47", "update_id": 126004, "user_id": 91, "id": 857250, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-11-05 00:10:20", "update_id": 126004, "user_id": 91, "id": 857386, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes", "timestamp": "2018-11-19 06:00:23", "update_id": 126004, "user_id": 91, "id": 864299, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by rathann. ", "timestamp": "2018-11-19 22:30:54", "update_id": 126004, "user_id": 91, "id": 864565, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2018-11-19 23:45:14", "update_id": 126004, "user_id": 91, "id": 864589, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-11-21 00:43:18", "update_id": 126004, "user_id": 91, "id": 865039, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "mkvtoolnix-28.2.0-1.el7", "signed": true, "release_id": 8, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1644258, "title": "CVE-2018-4022 mkvtoolnix: MKVINFO read_one_element code execution vulnerability", "security": true, "parent": true, "feedback": [{"karma": 0, "comment_id": 856203, "bug_id": 1644258, "comment": {"karma": 1, "karma_critpath": 0, "text": "works for me", "timestamp": "2018-11-01 20:10:26", "update_id": 125702, "user_id": 2998, "id": 856203, "testcase_feedback": [], "user": {"name": "samoht0", "email": "samoht0-bugzilla@yahoo.com", "id": 2998, "avatar": "https://seccdn.libravatar.org/avatar/4a429e081c6c9f7b9d9cd4a3f4037fc93517c13e17258f8549f2d2f85f0912e7?s=24&d=retro", "openid": "samoht0.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 858140, "bug_id": 1644258, "comment": {"karma": -1, "karma_critpath": 0, "text": "This doesn't seem to work for me:\n\n$ /usr/bin/mkvmerge --output /home/username/Videos/VTS_01_1.mkv --language 0:und --language 1:und '(' /run/media/username/NLATP/VIDEO_TS/VTS_01_1.VOB /run/media/username/NLATP/VIDEO_TS/VTS_01_2.VOB /run/media/username/NLATP/VIDEO_TS/VTS_01_3.VOB ')' --track-order 0:0,0:1\nmkvmerge v28.2.0 ('The Awakening') 64-bit\n'/run/media/username/NLATP/VIDEO_TS/VTS_01_1.VOB': Using the demultiplexer for the format 'MPEG program stream'.\n'/run/media/username/NLATP/VIDEO_TS/VTS_01_1.VOB': Processing the following files as well: \"VTS_01_2.VOB\", \"VTS_01_3.VOB\"\nWarning: '/run/media/username/NLATP/VIDEO_TS/VTS_01_1.VOB': A track with the ID 0 was requested but not found in the file. The corresponding option will be ignored.\nWarning: '/run/media/username/NLATP/VIDEO_TS/VTS_01_1.VOB': A track with the ID 1 was requested but not found in the file. The corresponding option will be ignored.", "timestamp": "2018-11-06 23:28:11", "update_id": 125701, "user_id": 352, "id": 858140, "testcase_feedback": [], "user": {"name": "jgu", "email": "jonathan.underwood@gmail.com", "id": 352, "avatar": "https://seccdn.libravatar.org/avatar/4a621d98f40f6f47bf4d807f3bb485c9438a872be5f7e94b2f09e93faad57aed?s=24&d=retro", "openid": "jgu.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 858219, "bug_id": 1644258, "comment": {"karma": 0, "karma_critpath": 0, "text": "@jgu did it work in 27.0.0 or any previous version? Otherwise it's not a regression but a new bug and not a reason to hold this update.", "timestamp": "2018-11-07 01:19:18", "update_id": 125701, "user_id": 237, "id": 858219, "testcase_feedback": [], "user": {"name": "rathann", "email": "dominik@greysector.net", "id": 237, "avatar": "https://seccdn.libravatar.org/avatar/852ad2034e4d2de4eec5ee7c54530a61535edb605c2e9269cd07682a32fbdbaa?s=24&d=retro", "openid": "rathann.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "scitech_sig"}, {"name": "scitech"}, {"name": "websites-apps-cms"}, {"name": "multimedia-sig"}]}}}]}, {"bug_id": 1644260, "title": "CVE-2018-4022 mkvtoolnix: MKVINFO read_one_element code execution vulnerability [epel-all]", "security": true, "parent": false, "feedback": []}], "updateid": "FEDORA-EPEL-2018-cbfa290941", "karma": 0, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}