[Secure-testing-commits] r58485 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Tue Dec 12 10:03:41 UTC 2017


Author: carnil
Date: 2017-12-12 10:03:41 +0000 (Tue, 12 Dec 2017)
New Revision: 58485

Modified:
   data/CVE/list
Log:
Two CVEs fixed in ffmpeg 7:3.4.1-1 upload to unstable

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-12-12 09:27:38 UTC (rev 58484)
+++ data/CVE/list	2017-12-12 10:03:41 UTC (rev 58485)
@@ -2365,7 +2365,7 @@
 CVE-2017-17082
 	REJECTED
 CVE-2017-17081 (The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 3.4 ...)
-	- ffmpeg <unfixed>
+	- ffmpeg 7:3.4.1-1
 	[stretch] - ffmpeg <postponed> (Can wait for the next 3.2.x release)
 	NOTE: https://github.com/FFmpeg/FFmpeg/commit/58cf31cee7a456057f337b3102a03206d833d5e8
 CVE-2017-17080 (elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as ...)
@@ -4758,7 +4758,7 @@
 	NOT-FOR-US: LanSweeper
 CVE-2017-16840 (The VC-2 Video Compression encoder in FFmpeg 3.4 allows remote ...)
 	{DSA-4049-1}
-	- ffmpeg <unfixed>
+	- ffmpeg 7:3.4.1-1
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=a94cb36ab2ad99d3a1331c9f91831ef593d94f74
 CVE-2017-16839
 	RESERVED




More information about the Secure-testing-commits mailing list