[Secure-testing-commits] r38957 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2016-01-15 21:30:05 +0000 (Fri, 15 Jan 2016)
New Revision: 38957

Modified:
   data/CVE/list
Log:
Add note for CVE-2016-189{7,8}/ffmpeg

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-01-15 21:10:17 UTC (rev 38956)
+++ data/CVE/list	2016-01-15 21:30:05 UTC (rev 38957)
@@ -409,12 +409,14 @@
 	[squeeze] - ffmpeg <end-of-life> (Not supported in Squeeze LTS)
 	- libav <removed>
 	NOTE: http://habrahabr.ru/company/mailru/blog/274855
+	NOTE: Fixed in 2.8.5 upstream
 CVE-2016-1897
 	RESERVED
 	- ffmpeg <unfixed>
 	[squeeze] - ffmpeg <end-of-life> (Not supported in Squeeze LTS)
 	- libav <removed>
 	NOTE: http://habrahabr.ru/company/mailru/blog/274855
+	NOTE: Fixed in 2.8.5 upstream
 CVE-2016-1867 [Out-of-bounds Read in the JasPer's jpc_pi_nextcprl() function]
 	RESERVED
 	- jasper <unfixed> (bug #811023)