[Secure-testing-commits] r45055 - data/CVE

security tracker role sectracker at moszumanska.debian.org
Wed Oct 5 09:10:15 UTC 2016


Author: sectracker
Date: 2016-10-05 09:10:15 +0000 (Wed, 05 Oct 2016)
New Revision: 45055

Modified:
   data/CVE/list
Log:
automatic update

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-10-05 07:50:51 UTC (rev 45054)
+++ data/CVE/list	2016-10-05 09:10:15 UTC (rev 45055)
@@ -3335,6 +3335,7 @@
 	RESERVED
 CVE-2016-7393 [stack-based buffer overflow in aac_sync (aac_parser.c)]
 	RESERVED
+	{DLA-644-1}
 	- ffmpeg 7:2.4-1
 	- libav <removed>
 	[jessie] - libav 6:11.6-1~deb8u1
@@ -3720,6 +3721,7 @@
 CVE-2016-7119 (Cross-site scripting (XSS) vulnerability in the user-profile biography ...)
 	TODO: check
 CVE-2016-7117 [use after free in the recvmmsg exit path]
+	RESERVED
 	- linux 4.5.2-1
 	[jessie] - linux 3.16.36-1
 	[wheezy] - linux 3.2.81-1
@@ -35668,6 +35670,7 @@
 CVE-2015-5480
 	RESERVED
 CVE-2015-5479 (The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav ...)
+	{DLA-644-1}
 	- ffmpeg <not-affected> (Vulnerable code not present)
 	[squeeze] - ffmpeg <end-of-life> (Not supported in Squeeze LTS)
 	- libav <removed> (low)
@@ -46513,6 +46516,7 @@
 CVE-2015-1873
 	RESERVED
 CVE-2015-1872 (The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c in FFmpeg ...)
+	{DLA-644-1}
 	- ffmpeg 7:2.5.4-1
 	[squeeze] - ffmpeg <end-of-life> (Not supported in Squeeze LTS)
 	- libav <removed>




More information about the Secure-testing-commits mailing list