[Secure-testing-commits] r49880 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-03-21 11:03:07 +0000 (Tue, 21 Mar 2017)
New Revision: 49880

Modified:
   data/CVE/list
Log:
new libav issues (ffmpeg needs to be checked)


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-03-21 10:22:52 UTC (rev 49879)
+++ data/CVE/list	2017-03-21 11:03:07 UTC (rev 49880)
@@ -14,11 +14,17 @@
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f055032e4e922f1e1a5e11026c7c2669fa2a7d19
 	NOTE: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=1835f746a7c7fff70a2cc03a051b14fdc6b3f73f
 CVE-2017-7208 (The decode_residual function in libavcodec in libav 9.21 allows remote ...)
-	TODO: check
+	- libav <removed>
+	- ffmpeg <undetermined>
+	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1000
+	NOTE: https://git.libav.org/?p=libav.git;a=commit;h=522d850e68ec4b77d3477b3c8f55b1ba00a9d69a
 CVE-2017-7207 (The mem_get_bits_rectangle function in Artifex Software, Inc. ...)
 	TODO: check
 CVE-2017-7206 (The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows ...)
-	TODO: check
+	- libav <removed>
+	- ffmpeg <undetermined>
+	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1002
+	NOTE: https://git.libav.org/?p=libav.git;a=commit;h=83b2b34d06e74cc8775ba3d833f9782505e17539
 CVE-2017-7205 (A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. ...)
 	TODO: check
 CVE-2017-7204 (A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. The ...)