[Secure-testing-commits] r28074 - data/CVE

[Reinhard Tartler]

Author: siretart
Date: 2014-08-04 12:48:01 +0000 (Mon, 04 Aug 2014)
New Revision: 28074

Modified:
   data/CVE/list
Log:
CVE-2013-0851 libav fixed

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-08-04 12:47:53 UTC (rev 28073)
+++ data/CVE/list	2014-08-04 12:48:01 UTC (rev 28074)
@@ -30321,8 +30321,7 @@
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=c0d68be555f5858703383040e04fcd6529777061
 CVE-2013-0851 (The decode_frame function in libavcodec/eamad.c in FFmpeg before 1.1 ...)
 	- ffmpeg <not-affected> (Electronic Arts Madcow Video decoder not present in ffmpeg 0.5)
-	- libav <unfixed>
-	NOTE: looks valid as "if (buf_size < 17) { ... error... }" but at least buf[21] is used.
+	- libav 6:10.3-1
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=63ac64864c6e0e84355aa3caa5b92208997a9a8d
 	NOTE: https://git.libav.org/?p=libav.git;a=commit;h=f9204ec56a4cf73843d1e5b8563d3584c2c05b47 (v10)
 	NOTE: https://git.libav.org/?p=libav.git;a=commit;h=e8ff7972064631afbdf240ec6bfd9dec30cf2ce8 (v9)