Bug#401304: CVE-2006-4800: GStreamer FFmpeg Plug-in Multiple Buffer Overflows

Loïc Minier lool at dooz.org
Wed Dec 6 15:08:42 CET 2006


On Sat, Dec 02, 2006, Stefan Fritsch wrote:
> According to
> http://secunia.com/advisories/22202/
> gstreamer0.8-ffmpeg is vulnerable to an ffmpeg buffer overflow and
> gstreamer0.8-ffmpeg does not seem to link dynamically against the ffmpeg in
> Debian. You should try to link against ffmpeg dynamically if possible.
> Please mention the CVE id in the changelog.

 Patch from Andreas Barth applied and uploaded, feedback on the fix is
 welcome.

   Thanks,
-- 
Loïc Minier <lool at dooz.org>
 "I have no strong feelings one way or the other." -- Neutral President




More information about the Pkg-gstreamer-maintainers mailing list