diff options
| author | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-03-18 00:55:31 +0000 |
|---|---|---|
| committer | Darren Salt <linux@youmustbejoking.demon.co.uk> | 2008-03-18 00:55:31 +0000 |
| commit | 9a0b055e96c2f68b46787a17cb3c314f6cefc95d (patch) | |
| tree | 917f18d962ae7c4dee0aab36c11347bd294ab40d /ChangeLog | |
| parent | cdec7f82959eb05d1c3e4632af9d1e54bcc4c3bb (diff) | |
| parent | 431033df2571df5bdd1ec1253cf04921b6d01368 (diff) | |
| download | xine-lib-9a0b055e96c2f68b46787a17cb3c314f6cefc95d.tar.gz xine-lib-9a0b055e96c2f68b46787a17cb3c314f6cefc95d.tar.bz2 | |
Merge from 1.1.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -90,6 +90,10 @@ xine-lib (1.1.10.1) 2008-02-07 - Array index vulnerability which may allow remote attackers to execute arbitrary code via a crafted FLAC tag, causing a stack buffer overflow. (CVE-2008-0486) + - Buffer overflow in the Matroska demuxer (demuxers/demux_matroska.c) + which may allow remote attackers to cause a denial of service (crash) + or possibly execute arbitrary code via a Matroska file with invalid + frame sizes. (CVE-2008-1161) * Fix a RealPlayer codec detection bug. * Improve detection of MP3 streams with ID3v2 tags. Don't trust the tag size. @@ -98,7 +102,7 @@ xine-lib (1.1.10) 2008-01-26 * Security fixes: - Buffer overflow which allows a remote attacker to execute arbitrary code or crash the client program via a crafted ASF header. - (Related to CVE-2006-1664) + (CVE-2008-1110, related to CVE-2006-1664) * Update Ogg and Annodex mimetypes and extensions. * Change the default v4l device paths to /dev/video0 and /dev/radio0. * Fix support for subtitles with schemes (e.g. http://), partly broken |