[Secure-testing-commits] r3525 - data

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2006-02-23 11:56:13 +0000 (Thu, 23 Feb 2006)
New Revision: 3525

Modified:
   data/open-issues.txt
Log:
claim one issue, create a new one


Modified: data/open-issues.txt
===================================================================
--- data/open-issues.txt	2006-02-23 11:52:37 UTC (rev 3524)
+++ data/open-issues.txt	2006-02-23 11:56:13 UTC (rev 3525)
@@ -8,7 +8,7 @@
 Does this have a CVE name?
 Does it affect imagemagick?
 
-=== none
+=== jmm
 
 tikiwiki has been uploaded to the archive a month ago. All previous issues
 in it should be reviewed, whether they're fixed and CVE/list updated
@@ -22,4 +22,10 @@
      functions never returning, wrong printf format strings)
    * Fixed 2 buffer overflows in fweelin_core_dsp.cc
 
-Are any of these exploitable issues?
\ No newline at end of file
+Are any of these exploitable issues?
+
+=== none
+
+ffmpeg creates libavcodec only statically. It should be evaluated if there's
+really a compelling reason, as it requires massive recompiles for every security
+update. If upstream is reluctant this could be done locally for Etch at least.