[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] libvpx fixed

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
165f541f by Moritz Muehlenhoff at 2018-02-20T11:41:24+01:00
libvpx fixed

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -30553,9 +30553,8 @@ CVE-2017-13196 (In several places in ihevcd_decode.c, a dead loop could occur du
 CVE-2017-13195 (In the ihevcd_parse_sps function of ihevcd_parse_headers.c, several ...)
 	TODO: check
 CVE-2017-13194 (A vulnerability in the Android media framework (libvpx) related to odd ...)
-	- libvpx <undetermined>
+	- libvpx 1.7.0-2
 	NOTE: Android patch: https://android.googlesource.com/platform/external/libvpx/+/55cd1dd7c8d0a3de907d22e0f12718733f4e41d9
-	TODO: check
 CVE-2017-13193 (In ihevcd_decode.c there is a possible infinite loop due to bytes for ...)
 	TODO: check
 CVE-2017-13192 (In the ihevcd_parse_slice_header function of ...)


=====================================
data/dsa-needed.txt
=====================================
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -35,7 +35,7 @@ libidn
 --
 libmad
 --
-libvpx/oldstable
+libvpx
 --
 linux
   Wait until more issues have piled up



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/165f541f493662ebb4ec34f75ab47b7d1fcb2d29

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/165f541f493662ebb4ec34f75ab47b7d1fcb2d29
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180220/fde3f177/attachment-0001.html>