Author: jmm
Date: 2017-08-12 20:17:42 +0000 (Sat, 12 Aug 2017)
New Revision: 54699
Modified:
data/CVE/list
Log:
mark libvpx as unimportant
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2017-08-12 20:16:08 UTC (rev 54698)
+++ data/CVE/list 2017-08-12 20:17:42 UTC (rev 54699)
@@ -34015,9 +34015,10 @@
CVE-2017-0642 (A remote denial of service vulnerability in libhevc in
Mediaserver ...)
NOT-FOR-US: Android Mediaserver
CVE-2017-0641 (A remote denial of service vulnerability in libvpx in
Mediaserver ...)
- - libvpx <unfixed> (bug #871931)
+ - libvpx <unfixed> (unimportant; bug #871931)
NOTE:
https://android.googlesource.com/platform/external/libvpx/+/698796fc930baecf5c3fdebef17e73d5d9a58bcb
- NOTE: Debian builds configures with --size-limit=16384x16384
+ NOTE: Debian builds configures with --size-limit=16384x16384, Android
lowered
+ NOTE: the limit to something more aligned for smart phones
CVE-2017-0640 (A remote denial of service vulnerability in Mediaserver could
enable ...)
NOT-FOR-US: Android Mediaserver
CVE-2017-0639 (An information disclosure vulnerability in Bluetooth component
could ...)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
