Author: siretart
Date: 2014-08-04 12:47:53 +0000 (Mon, 04 Aug 2014)
New Revision: 28073
Modified:
data/CVE/list
Log:
CVE-2011-3935 libav
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2014-08-04 06:23:52 UTC (rev 28072)
+++ data/CVE/list 2014-08-04 12:47:53 UTC (rev 28073)
@@ -52932,9 +52932,11 @@
- libav 4:0.8.1-1
- ffmpeg <removed>
CVE-2011-3935 (The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10
allows ...)
- - libav <undetermined>
+ - libav <not-affected>
+ [wheezy] - libav <unfixed>
- ffmpeg <not-affected> (vuln. code not present, introduced later)
NOTE: libav and ffmpeg code bases have diverged too much, unclear
whether libav is affected
+ NOTE: [Diego] applies to 0.8 and 9 only, cherrypicked fixes on ML
CVE-2011-3934 (Double free vulnerability in the vp3_update_thread_context
function in ...)
- libav <unfixed> (unimportant)
- ffmpeg <removed> (unimportant)
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
