Bug#504977: ffmpeg-debian: Several security issues

Ben Hutchings ben at decadent.org.uk
Fri Jan 9 22:15:20 UTC 2009


On Fri, 2009-01-09 at 22:40 +0100, Reinhard Tartler wrote:
> Ben Hutchings <ben at decadent.org.uk> writes:
> 
> >> I'll upload it as soon as someone can confirm me that these packages
> >> actually fix the problem.
> >
> > Based on inspection of the original code and patch for -4866 in this
> > test package, I am confident that this will be fixed.
> 
> hm. okay, then I'll upload that package.
> 
> > Please also include the fix for -4867 (#496612) as it sounds like the
> > bug could be used for code injection and the change looks low-risk.
> 
> could you attach a patch there please first?

Never mind, the problem code is not included in the current xine-lib
package.

Ben.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20090109/af2224de/attachment.pgp 


More information about the pkg-multimedia-maintainers mailing list