On 10/28/2011 07:57 PM, Michael Gilbert wrote:
> On Fri, Oct 28, 2011 at 9:20 AM, Mehdi Dogguy wrote:
>> Package: mplayer2
>> Version: 2.0-134-g84d8671-8
>> Severity: grave
>> Tags: security
>> Justification: user security hole
>>
>> Please see:
>> http://www.openwall.com/lists/oss-security/2011/10/14/1
>> http://labs.mwrinfosecurity.com/files/Advisories/mwri_mplayer-sami-subtitles_2011-08-12.pdf
>>
>> Fix:
>> http://git.mplayer2.org/mplayer2/commit/?id=27b88a09c5319deb62221b8cd0ecc14cd1136e4a
> 
> How is this different from #645987?
> 

#645987 was reported against mplayer (not mplayer2). I could have cloned
the bugreport bug didn't think about that when closing it ; and
re-assigning isn't appropriate since the issue is valid for both packages.

I cc'ed the security team so that you can update security-tracker's data.

Regards,

-- 
Mehdi Dogguy مهدي الدڤي
http://dogguy.org/



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to