[Secure-testing-commits] r56212 - data/CVE

[Moritz Muehlenhoff]

Author: jmm
Date: 2017-09-28 07:03:47 +0000 (Thu, 28 Sep 2017)
New Revision: 56212

Modified:
   data/CVE/list
Log:
fix reference for ffmpeg entry
add rtpproxy upstream bug


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2017-09-28 03:29:56 UTC (rev 56211)
+++ data/CVE/list	2017-09-28 07:03:47 UTC (rev 56212)
@@ -163,7 +163,7 @@
 CVE-2017-14767 (The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in ...)
 	- ffmpeg 7:3.3.4-1
 	- libav <undetermined>
-	NOTE: https://github.com/FFmpeg/FFmpeg/commit/837cb4325b712ff1aab531bf41668933f61d75d2
+	NOTE: https://github.com/FFmpeg/FFmpeg/commit/c42a1388a6d1bfd8001bf6a4241d8ca27e49326d
 	NOTE: Fixed in 3.2.8
 CVE-2017-14766 (The Simple Student Result plugin before 1.6.4 for WordPress has an ...)
 	NOT-FOR-US: Wordpress plugin
@@ -1986,6 +1986,7 @@
 CVE-2017-14114 (RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in ...)
 	- rtpproxy <unfixed> (bug #874070)
 	NOTE: https://rtpbleed.com/
+	NOTE: https://github.com/sippy/rtpproxy/issues/70
 CVE-2017-14113
 	REJECTED
 CVE-2017-14112