Date: Fri, 2 Sep 2011 00:17:52 -0400 From: Michael Gilbert <michael.s.gilbert@...il.com> To: oss-security@...ts.openwall.com, coley@...-smtp.mitre.org Subject: ffmpeg issues Hi, We're trying to figure out the status of ffmpeg in debian . Does anyone have any real info on CVE-2011-2160 (whose CVE page is in essence completely empty) . BTW, how is a link to the software's homepage considered a confirmation of the issue? Also, CVE-2011-2162  seems to be a rehash of a bunch of CVE ids that happened to be in the recent dump of Mandriva advisories. Shouldn't this get REJECTED since its just a collection of already known and tracked issues? Thanks, Mike  http://lists.debian.org/debian-security-tracker/2011/08/msg00009.html  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2160  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2162
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.