[Asterisk-Security] mpg123 check

[Michael Sandee]

A problem with mpg123 is that the upstream is no longer maintained (for 
quite a while now)... so it is simply bad to rely on it... Gentoo still 
maintains it regarding security updates... (aswell as debian iirc)

Although I'm not going to volunteer... it would be best to find a good 
alternative... (Some people have actually done this using other tools 
and some hacks...)

Michael

Javor Ninov wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi,
> Can some one chek the status of mpg123 about this issue :
> http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0991
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFB9UA7ck4kcwaj+YIRAv04AJ9+nNAZTH8UzdvQzI4kQF+MbnYClACfRhV3
> 3Ukd9B3gMIhaTAU56frGNF8=
> =ds2K
> -----END PGP SIGNATURE-----
> _______________________________________________
> Asterisk-Security mailing list
> Asterisk-Security at lists.digium.com
> http://lists.digium.com/mailman/listinfo/asterisk-security
>