[Secure-testing-commits] r3074 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-12-16 14:20:24 +0000 (Fri, 16 Dec 2005)
New Revision: 3074

Modified:
   data/CVE/list
Log:
kino links statically against libavcodec from ffmpeg


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-12-16 14:02:40 UTC (rev 3073)
+++ data/CVE/list	2005-12-16 14:20:24 UTC (rev 3074)
@@ -447,7 +447,8 @@
 	- xine-lib <unfixed> (bug #342208; medium)
 	- mplayer <itp> (bug #113238; medium)
 	- gst-ffmpeg 0.8.7-5 (bug #343503; medium)
-	NOTE: kino does not contain the vulnerable code.
+	- kino <unfixed> (medium)
+	NOTE: kino links statically against libavcodec, needs a recompile once ffmpeg is fixed
 CVE-2005-4047 (Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ...)
 	NOT-FOR-US: IISWorks ASPKnowledgeBase
 CVE-2005-4046 (Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java ...)