diff options
| author | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-01-17 23:51:26 +0000 |
|---|---|---|
| committer | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-01-17 23:51:26 +0000 |
| commit | 831fa3d538480c035102864007dc4eb4969f2fd7 (patch) | |
| tree | 8436492e54ccc45ec815835fd170a5a071526e8b | |
| parent | ead9fc9aabadff4ea507e442a272ca2847ec537d (diff) | |
| download | xine-lib-831fa3d538480c035102864007dc4eb4969f2fd7.tar.gz xine-lib-831fa3d538480c035102864007dc4eb4969f2fd7.tar.bz2 | |
Correct the changelog entry for the security fix in 1.1.9.1.
--HG--
extra : transplant_source : AR%05H%29fH%3B%A37F%22h%85%7D%09%11/%FE%DF
| -rw-r--r-- | ChangeLog | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -4,7 +4,8 @@ xine-lib (1.1.10) (unreleased) xine-lib (1.1.9.1) * Security fixes: - - Fix a buffer overflow in RTSP header-handling code. (CVE-2008-0225) + - Buffer overflow which allows a remote attacker to execute arbitrary + code via a crafted SDP Abstract attribute. (CVE-2008-0225) (Fix ported from mplayer changeset 22821) * Fix a read-past-end bug in xine-lib's internal strtok_r replacement. (Only affects systems without strtok_r.) [Bug #19] |