[Secure-testing-team] libmlt uses embedded libebur128 (see bug#762341)

[Jonas Smedegaard]

Quoting Jonas Smedegaard (2014-09-21 13:52:02)
> Just wanted to let you know that I discovered a case of embedded 
> library use, and https://wiki.debian.org/EmbeddedCodeCopies seems to 
> suggest reporting that here.  More info at bug#762341.
> 
> Digging deeper, that embedded code copy differ by a single line from 
> Debian shared libeur128 - it seems security-related: 
> https://github.com/mltframework/mlt/commit/9d35a6

For the record, the memory leak fix has now been applied to mainline 
libebur128 as well, and getting that fix into Debian is filed as 
bug#762384.

Original issue still stand: MLT use an embedded copy of libebur128.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-team/attachments/20140921/4ee415a6/attachment.sig>