[Secure-testing-commits] r14204 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-03-07 00:16:58 +0000 (Sun, 07 Mar 2010)
New Revision: 14204

Modified:
   data/CVE/list
Log:
ffmpeg issues fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-07 00:03:05 UTC (rev 14203)
+++ data/CVE/list	2010-03-07 00:16:58 UTC (rev 14204)
@@ -761,7 +761,7 @@
 CVE-2009-4643 (Stack-based buffer overflow in dsInstallerService.dll in the Juniper ...)
 	NOT-FOR-US: Juniper Installer Service
 CVE-2009-XXXX [ffmpeg vulnerabilities]
-	- ffmpeg <unfixed> (medium; bug #570713; bug #550442)
+	- ffmpeg 0.5.1-1 (medium; bug #570713; bug #550442)
 	- ffmpeg-debian <removed> (medium)
 CVE-2010-XXXX [dillo improper restriction of path in cookies]
 	- dillo <undetermined>
@@ -967,8 +967,9 @@
 	- ffmpeg 4:0.5+svn20090706-3
 	- ffmpeg-debian <removed>
 CVE-2009-4639 (The av_rescale_rnd function in the AVI demuxer in FFmpeg 0.5 allows ...)
-	- ffmpeg <unfixed>
+	- ffmpeg <unfixed> (unimportant)
 	- ffmpeg-debian <removed>
+        NOTE: denial-of-service only, so not worth worrying about
 CVE-2009-4638 (Integer overflow in FFmpeg 0.5 allows remote attackers to cause a ...)
 	{DSA-2000-1}
 	- ffmpeg 4:0.5+svn20090706-3