[Secure-testing-commits] r57151 - in data: . CVE DSA

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-10-30 23:19:27 +0000 (Mon, 30 Oct 2017)
New Revision: 57151

Modified:
   data/CVE/list
   data/DSA/list
   data/dsa-needed.txt
Log:
libav DSA


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-10-30 21:31:17 UTC (rev 57150)
+++ data/CVE/list	2017-10-30 23:19:27 UTC (rev 57151)
@@ -26725,7 +26725,6 @@
 CVE-2017-7208 (The decode_residual function in libavcodec in libav 9.21 allows remote ...)
 	{DLA-1142-1}
 	- libav <removed> (low)
-	[jessie] - libav <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=1000
 	NOTE: https://git.libav.org/?p=libav.git;a=commit;h=522d850e68ec4b77d3477b3c8f55b1ba00a9d69a
 CVE-2017-7207 (The mem_get_bits_rectangle function in Artifex Software, Inc. ...)

Modified: data/DSA/list
===================================================================
--- data/DSA/list	2017-10-30 21:31:17 UTC (rev 57150)
+++ data/DSA/list	2017-10-30 23:19:27 UTC (rev 57151)
@@ -1,3 +1,6 @@
+[31 Oct 2017] DSA-4012-1 libav - security update
+	{CVE-2015-8365 CVE-2017-7208 CVE-2017-7862 CVE-2017-9992}
+	[jessie] - libav 6:11.11-1~deb8u1
 [30 Oct 2017] DSA-4011-1 quagga - security update
 	{CVE-2017-16227}
 	[jessie] - quagga 0.99.23.1-1+deb8u4

Modified: data/dsa-needed.txt
===================================================================
--- data/dsa-needed.txt	2017-10-30 21:31:17 UTC (rev 57150)
+++ data/dsa-needed.txt	2017-10-30 23:19:27 UTC (rev 57151)
@@ -23,9 +23,6 @@
 --
 irssi
 --
-libav/oldstable (jmm)
-  several issues unfixed upstream
---
 libvpx/oldstable
 --
 libxml-libxml-perl (carnil)