diff options
| author | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-04-20 18:03:04 +0100 |
|---|---|---|
| committer | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-04-20 18:03:04 +0100 |
| commit | d59c3de535738d8cd5d313b5a4f5502fa0aa7081 (patch) | |
| tree | 7dd538bb4f792529a6e10892c41ac4d2e53156e2 | |
| parent | b20ea4a074c5be50e82321061ee73193b15a10d7 (diff) | |
| download | xine-lib-d59c3de535738d8cd5d313b5a4f5502fa0aa7081.tar.gz xine-lib-d59c3de535738d8cd5d313b5a4f5502fa0aa7081.tar.bz2 | |
CVE no. for the NSF bug.
| -rw-r--r-- | ChangeLog | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -2,7 +2,7 @@ xine-lib (1.1.12.1) 2008-??-?? * Security fixes: - Buffer overflow in the NSF demuxer which may allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code - via an NSF file with a long title or copyright message. (SA29850) + via an NSF file with a long title or copyright message. (CVE-2008-1878) - For extra safety against possible Integer overflows like the ones found in CVE-2008-1482, backport more calloc usage from 1.2 branch. |