Secure testing commits - Nov 2008 - r10340 - data/CVE

Author: white
Date: 2008-11-08 08:37:49 +0000 (Sat, 08 Nov 2008)
New Revision: 10340

Modified:
   data/CVE/list
Log:
only one issue affects mplayer in stable, ffmpeg clean

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-11-08 08:29:32 UTC (rev 10339)
+++ data/CVE/list	2008-11-08 08:37:49 UTC (rev 10340)
@@ -190,9 +190,12 @@
 	TODO: check other code copies
 CVE-2008-4867 (Buffer overflow in libavcodec/dca.c in FFmpeg 0.4.9 before
r14917, as ...)
 	- ffmpeg-debian 0.svn20080206-14
+	[etch] - ffmpeg <not-affected> (Vulnerable code not present)
+	[etch] - mplayer <not-affected> (Vulnerable code not present)
 	TODO: check other code copies
 CVE-2008-4866 (Multiple buffer overflows in libavformat/utils.c in FFmpeg 0.4.9
...)
 	- ffmpeg-debian 0.svn20080206-14
+	[etch] - ffmpeg <not-affected> (Vulnerable code not present)
 	TODO: check other code copies
 CVE-2008-4865 (Untrusted search path vulnerability in valgrind allows local
users to ...)
 	TODO: check