[Secure-testing-commits] r10880 - data/CVE

Wed Jan 7 18:36:19 UTC 2009

Author: nion
Date: 2009-01-07 18:36:19 +0000 (Wed, 07 Jan 2009)
New Revision: 10880

Modified:
   data/CVE/list
Log:
CVE-2008-4610 regarding ffmpeg unimportant

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2009-01-07 18:33:59 UTC (rev 10879)
+++ data/CVE/list	2009-01-07 18:36:19 UTC (rev 10880)
@@ -2925,7 +2925,8 @@
 	- mplayer 1.0~rc2-20 (low; bug #407010)
 	NOTE: only the aac issue affected mplayer because it built against a copy of faad
 	NOTE: the ogm issue is a problem in ffmpeg
-	- ffmpeg-debian <unfixed> (low; bug #509616)
+	- ffmpeg-debian <unfixed> (unimportant; bug #509616)
+	NOTE: just a crasher, no security implications known so far
 	NOTE: http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities
 CVE-2008-4609 (The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, ...)
 	TODO: check


