[Secure-testing-commits] r30328 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2014-11-25 19:11:45 +0000 (Tue, 25 Nov 2014)
New Revision: 30328

Modified:
   data/CVE/list
Log:
Update status for CVE-2014-8546, expand todo

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2014-11-25 19:11:38 UTC (rev 30327)
+++ data/CVE/list	2014-11-25 19:11:45 UTC (rev 30328)
@@ -1681,7 +1681,11 @@
 CVE-2014-8547 (libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute ...)
 	TODO: check
 CVE-2014-8546 (Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 ...)
-	TODO: check
+        - ffmpeg <undetermined>
+        - libav <undetermined>
+	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=e7e5114c506957f40aafd794e06de1a7e341e9d5
+
+	TODO: check, not sure if patch correct, is applied in 7:2.4.3-1
 CVE-2014-8545 (libavcodec/pngdec.c in FFmpeg before 2.4.2 accepts the ...)
         - ffmpeg 7:2.4.3-1
         - libav <undetermined>