[Secure-testing-commits] r30978 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2014-12-25 23:43:09 +0000 (Thu, 25 Dec 2014)
New Revision: 30978

Modified:
   data/CVE/list
Log:
libav updates from upstream


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-12-25 23:20:39 UTC (rev 30977)
+++ data/CVE/list	2014-12-25 23:43:09 UTC (rev 30978)
@@ -3326,10 +3326,13 @@
 	- libav <unfixed> (bug #773626)
 	[wheezy] - libav <not-affected> (Vulnerable code not present)
 	NOTE: ffmpeg: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=105654e376a736d243aef4a1d121abebce912e6b
+        NOTE: libav: https://git.libav.org/?p=libav.git;a=commit;h=88626e5af8d006e67189bf10b96b982502a7e8ad
+	NOTE: Pending for 11.2 and 0.8.17
 CVE-2014-8541 (libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension ...)
 	- ffmpeg 7:2.4.3-1
 	[squeeze] - ffmpeg <end-of-life> (Backports to 0.5.x not useful, too many checks missing)
 	- libav <unfixed> (bug #773626)
+	[wheezy] - libav <not-affected> (Vulnerable code not present)
 	NOTE: ffmpeg: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=5c378d6a6df8243f06c87962b873bd563e58cd39
 	NOTE: libav: https://git.libav.org/?p=libav.git;a=commit;h=809c3023b699c54c90511913d3b6140dd2436550
 	NOTE: Pending for 11.2