File _patchinfo of Package patchinfo

<patchinfo incident="9469">
  <packager>AndreasStieger</packager>
  <issue tracker="cve" id="2018-4013"></issue>
  <issue tracker="cve" id="2019-6256"></issue>
  <issue tracker="bnc" id="1114779">VUL-0: CVE-2018-4013: live555: critical remote code execution vulnerability in the LIVE555 media streaming library</issue>
  <issue tracker="bnc" id="1121892">VUL-1: CVE-2019-6256: A DOS  issue was discovered in the LIVE555 Streaming Media libraries</issue>
  <category>security</category>
  <rating>moderate</rating>
  <summary>Security update for live555</summary>
  <description>This update fixes two security issues in live555:

- CVE-2018-4013: Remote code execution vulnerability (bsc#1114779)
- CVE-2019-6256: Denial of Service issue with RTSP-over-HTTP tunneling via x-sessioncookie HTTP headers (boo#1121892)

This library is statically linked into VLC. However VLC is not affected because it only uses the live555 library to implement the RTSP client.</description>
</patchinfo>