[Secure-testing-commits] r26541 - data/CVE

Mon Apr 14 15:05:06 UTC 2014

Author: jmm
Date: 2014-04-14 15:05:06 +0000 (Mon, 14 Apr 2014)
New Revision: 26541

Modified:
   data/CVE/list
Log:
one libav issue N/A


Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-04-14 15:04:52 UTC (rev 26540)
+++ data/CVE/list	2014-04-14 15:05:06 UTC (rev 26541)
@@ -6373,7 +6373,7 @@
 	NOTE: Only present in libav trunk
 CVE-2013-7011 (The read_header function in libavcodec/ffv1dec.c in FFmpeg before 2.1 ...)
 	- ffmpeg <end-of-life> (Backports to 0.5.x not useful, too many checks missing)
-	- libav <unfixed>
+	- libav <not-affected> (Reproducer fails on libav 0.8.9 and 9.11)
 	NOTE: https://github.com/FFmpeg/FFmpeg/commit/547d690d676064069d44703a1917e0dab7e33445
 	NOTE: https://trac.ffmpeg.org/ticket/2906
 CVE-2013-7010 (Multiple integer signedness errors in libavcodec/dsputil.c in FFmpeg ...)


