[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Update version for CVE-2017-1000460

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8403c867 by Salvatore Bonaccorso at 2018-01-09T07:30:40+01:00
Update version for CVE-2017-1000460

Looking closer at the fixing version, the respective change to check the
return value is already fixed with the import of 3.1.1:

https://anonscm.debian.org/git/pkg-multimedia/ffmpeg.git/commit/?id=c1a7bf0ae231d5bdcd001fb679f43e4e3f655e9d

Note for reviewers: please double-check for correctness.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -991,7 +991,7 @@ CVE-2017-1000461 (Brave Software's Brave Browser, version 0.19.73 (and earlier) 
 	NOT-FOR-US: Brave Software's Brave Browser
 CVE-2017-1000460 (In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), ...)
 	- libav <removed>
-	- ffmpeg 7:3.3.2-1
+	- ffmpeg 7:3.1.1-1
 	NOTE: https://bugzilla.libav.org/show_bug.cgi?id=952
 	NOTE: https://lists.ffmpeg.org/pipermail/ffmpeg-cvslog/2017-January/104221.html
 CVE-2018-4867



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8403c86753544c66810721bed22941495f0a269a

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/8403c86753544c66810721bed22941495f0a269a
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180109/c2ce41e1/attachment.html>