[Secure-testing-commits] r58249 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-12-04 17:43:11 +0000 (Mon, 04 Dec 2017)
New Revision: 58249

Modified:
   data/CVE/list
Log:
Add upstream bug references for CVE-2017-171{27..30}

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-04 17:21:24 UTC (rev 58248)
+++ data/CVE/list	2017-12-04 17:43:11 UTC (rev 58249)
@@ -700,13 +700,17 @@
 	RESERVED
 CVE-2017-17130 (The ff_free_picture_tables function in libavcodec/mpegpicture.c in ...)
 	- libav <removed>
+	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1100
 CVE-2017-17129 (The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 ...)
 	- libav <not-affected> (Vulnerable code introduced in 12.x)
+	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1101
 CVE-2017-17128 (The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 ...)
 	- libav <removed>
+	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1104
 CVE-2017-17127 (The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 ...)
 	- libav <removed>
 	[jessie] - libav <ignored> (Minor issue)
+	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1099
 CVE-2017-17126 (The load_debug_section function in readelf.c in GNU Binutils 2.29.1 ...)
 	- binutils <unfixed>
 	[stretch] - binutils <ignored> (Minor issue)