[Secure-testing-commits] r22808 - in data: . CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2013-07-01 08:15:32 +0000 (Mon, 01 Jul 2013)
New Revision: 22808

Modified:
   data/CVE/list
   data/dsa-needed-stable.txt
Log:
add php-radius to dsa-needed
libav/ffmpeg updates


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-01 07:29:29 UTC (rev 22807)
+++ data/CVE/list	2013-07-01 08:15:32 UTC (rev 22808)
@@ -9616,8 +9616,8 @@
 	RESERVED
 	- ffmpeg <removed>
 	- libav <unfixed>
-	TODO: check
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=d6c184880ee2e09fd68c0ae217173832cee5afc1
+	NOTE: This seems to be the corresponding libav commit: http://git.libav.org/?p=libav.git;a=commit;h=6e5cdf26281945ddea3aaf5eca4d127791f23ca8
 CVE-2013-0849 [libavcodec/roqvideodec.c]
 	RESERVED
 	- ffmpeg <removed>
@@ -9640,15 +9640,14 @@
 	RESERVED
 	- ffmpeg <removed>
 	- libav <unfixed>
-	TODO: check
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=a7ee6281f7ef1c29284e3a4cadfe0f227ffde1ed
+	NOTE: libav commit: http://git.libav.org/?p=libav.git;a=commit;h=39bec05ed42e505d17877b0c23f16322f9b5883b
 CVE-2013-0845 [libavcodec/alsdec.c]
 	RESERVED
-	- ffmpeg <removed>
-	[squeeze] - ffmpeg <not-affected> (codec not built)
+	- ffmpeg <not-affected> (MPEG-4 ALS decoder not present in ffmpeg/0.5)
 	- libav <unfixed>
-	TODO: check
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=0ceca269b66ec12a23bf0907bd2c220513cdbf16
+	NOTE: No change in libav git
 CVE-2013-0844 [libavcodec/adpcm.c out of array access]
 	RESERVED
 	- ffmpeg <removed>

Modified: data/dsa-needed-stable.txt
===================================================================
--- data/dsa-needed-stable.txt	2013-07-01 07:29:29 UTC (rev 22807)
+++ data/dsa-needed-stable.txt	2013-07-01 08:15:32 UTC (rev 22808)
@@ -29,6 +29,8 @@
 --
 openswan
 --
+php-radius
+--
 ruby1.9.1
 --
 srtp