[Secure-testing-commits] r28161 - data/CVE

Sat Aug 9 23:04:53 UTC 2014

Author: siretart
Date: 2014-08-09 23:04:53 +0000 (Sat, 09 Aug 2014)
New Revision: 28161

Modified:
   data/CVE/list
Log:
CVE-2011-3934 libav

Modified: data/CVE/list
===================================================================

--- data/CVE/list	2014-08-09 21:39:27 UTC (rev 28160)
+++ data/CVE/list	2014-08-09 23:04:53 UTC (rev 28161)
@@ -53005,10 +53005,9 @@
 	- ffmpeg <not-affected> (vuln. code not present, introduced later)
 	NOTE: [Diego] applies to 0.8 and 9 only, cherrypicked fixes on ML
 CVE-2011-3934 (Double free vulnerability in the vp3_update_thread_context function in ...)
-	- libav <unfixed> (unimportant)
+	- libav 6:0.8.15-1
 	- ffmpeg <removed> (unimportant)
 	NOTE: Fixed in libav trunk http://git.libav.org/?p=libav.git;a=commit;h=759001c534287a96dc96d1e274665feb7059145d
-	NOTE: Fixes for 0.8.x and 0.9.x still needed, backport too intrusive
 	NOTE: only a crasher
 CVE-2011-3933
 	RESERVED


