Author: jmm Date: 2016-12-15 09:48:29 +0000 (Thu, 15 Dec 2016) New Revision: 47096
Modified: data/CVE/list Log: two gstreamer no-dsa Modified: data/CVE/list =================================================================== --- data/CVE/list 2016-12-15 09:46:02 UTC (rev 47095) +++ data/CVE/list 2016-12-15 09:48:29 UTC (rev 47096) @@ -8233,12 +8233,14 @@ NOTE: http://www.openwall.com/lists/oss-security/2016/11/25/2 CVE-2016-9813 [null pointer deref (segfault) in mpegts decoder / _parse_pat] RESERVED - - gst-plugins-bad1.0 1.10.2-1 + - gst-plugins-bad1.0 1.10.2-1 (low) + [jessie] - gst-plugins-bad1.0 <no-dsa> (Minor issue) - gst-plugins-bad0.10 <not-affected> (Vulnerable code introduced in 1.1.1 of 1.0 series) NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=775120 CVE-2016-9812 [2 byte heap out of bounds read in gst_mpegts_section_new] RESERVED - - gst-plugins-bad1.0 1.10.2-1 + - gst-plugins-bad1.0 1.10.2-1 (low) + [jessie] - gst-plugins-bad1.0 <no-dsa> (Minor issue) - gst-plugins-bad0.10 <not-affected> (Vulnerable code introduced in 1.1.1 of 1.0 series) NOTE: https://bugzilla.gnome.org/show_bug.cgi?id=775048 CVE-2016-9811 [4 byte heap out of bounds read in windows_icon_typefind] _______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits