[Secure-testing-team] Lenny security bug sprint

[Nico Golde]

Hi,
* Moritz Muehlenhoff <jmm at inutil.org> [2008-11-28 20:51]:
> mplayer / CVE-2008-4610 (Nico)
>   The ogm file is handled gracefully, the aac file crashes mplayer, but needs
>   some checking, whether it's really a security problem.

the aac issue has been resolved and the ogm issue was 
tracked down to ffmpeg, bug with patch filed.

Cheers
Nico
-- 
Nico Golde - http://www.ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20081223/e425df0d/attachment.pgp