[Secure-testing-commits] r25680 - data/CVE

[Raphael Geissert]

Author: atomo64-guest
Date: 2014-02-11 12:52:46 +0000 (Tue, 11 Feb 2014)
New Revision: 25680

Modified:
   data/CVE/list
Log:
CVE-2011-3935 doesn't affect squeeze


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-02-11 12:19:21 UTC (rev 25679)
+++ data/CVE/list	2014-02-11 12:52:46 UTC (rev 25680)
@@ -43780,7 +43780,9 @@
 CVE-2011-3935 (The codec_get_buffer function in ffmpeg.c in FFmpeg before 0.10 allows ...)
 	- libav <unfixed> (bug #738572)
 	- ffmpeg <removed>
+	[squeeze] - ffmpeg <not-affected> (vuln. code not present)
 	NOTE: Seems needed for libav in cmdutils.c
+	NOTE: code introduced with 484e59a0a0329c4005ddacd05051925345f4362f, in 0.10
 CVE-2011-3934 (Double free vulnerability in the vp3_update_thread_context function in ...)
 	- libav <unfixed> (unimportant)
 	- ffmpeg <removed> (unimportant)