[Secure-testing-commits] r37782 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-11-19 20:21:58 +0000 (Thu, 19 Nov 2015)
New Revision: 37782

Modified:
   data/CVE/list
Log:
Update four CVEs for ffmpeg

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-11-19 20:13:55 UTC (rev 37781)
+++ data/CVE/list	2015-11-19 20:21:58 UTC (rev 37782)
@@ -49,13 +49,21 @@
 	- glance <unfixed>
 	TODO: check
 CVE-2015-8219 (The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before ...)
-	TODO: check
+	- ffmpeg 7:2.8.2-1
+	- libav <undetermined>
+	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commit;h=43492ff3ab68a343c1264801baa1d5a02de10167
 CVE-2015-8218 (The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg ...)
-	TODO: check
+	- ffmpeg 7:2.8.2-1
+	- libav <undetermined>
+	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commit;h=d4a731b84a08f0f3839eaaaf82e97d8d9c67da46
 CVE-2015-8217 (The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg ...)
-	TODO: check
+	- ffmpeg 7:2.8.2-1
+	- libav <undetermined>
+	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commit;h=93f30f825c08477fe8f76be00539e96014cc83c8
 CVE-2015-8216 (The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg ...)
-	TODO: check
+	- ffmpeg 7:2.8.2-1
+	- libav <undetermined>
+	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commit;h=d24888ef19ba38b787b11d1ee091a3d94920c76a
 CVE-2015-8215 (net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 ...)
 	{DSA-3364-1 DLA-310-1}
 	- linux 4.0.2-1