nion at alioth.debian.org
2009-Jan-07 18:36 UTC
[Secure-testing-commits] r10880 - data/CVE
Author: nion Date: 2009-01-07 18:36:19 +0000 (Wed, 07 Jan 2009) New Revision: 10880 Modified: data/CVE/list Log: CVE-2008-4610 regarding ffmpeg unimportant Modified: data/CVE/list ==================================================================--- data/CVE/list 2009-01-07 18:33:59 UTC (rev 10879) +++ data/CVE/list 2009-01-07 18:36:19 UTC (rev 10880) @@ -2925,7 +2925,8 @@ - mplayer 1.0~rc2-20 (low; bug #407010) NOTE: only the aac issue affected mplayer because it built against a copy of faad NOTE: the ogm issue is a problem in ffmpeg - - ffmpeg-debian <unfixed> (low; bug #509616) + - ffmpeg-debian <unfixed> (unimportant; bug #509616) + NOTE: just a crasher, no security implications known so far NOTE: http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities CVE-2008-4609 (The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, ...) TODO: check