[Secure-testing-commits] r52980 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2017-06-28 12:32:57 +0000 (Wed, 28 Jun 2017)
New Revision: 52980

Modified:
   data/CVE/list
Log:
Add CVE-2017-9994/ffmpeg

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-06-28 12:30:11 UTC (rev 52979)
+++ data/CVE/list	2017-06-28 12:32:57 UTC (rev 52980)
@@ -9,7 +9,9 @@
 	NOTE: https://github.com/FFmpeg/FFmpeg/commit/2171dfae8c065878a2e130390eb78cf2947a5b69
 	NOTE: https://github.com/FFmpeg/FFmpeg/commit/7ac5067146613997bb38442cb022d7f41321a706
 CVE-2017-9994 (libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x ...)
-	TODO: check
+	- ffmpeg 7:3.2.5-1
+	- libav <undetermined>
+	NOTE: https://github.com/FFmpeg/FFmpeg/commit/6b5d3fb26fb4be48e4966e4b1d97c2165538d4ef
 CVE-2017-9993 (FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, ...)
 	TODO: check
 CVE-2017-9992 (Heap-based buffer overflow in the decode_dds1 function in ...)