Bug#688847: Unclear status of CVE-2012-2774 CVE-2012-2783 CVE-2012-2791 CVE-2012-2797 CVE-2012-2803 CVE-2012-2804

[Moritz Muehlenhoff]

On Mon, Nov 26, 2012 at 08:01:03PM +0100, Arne Wichmann wrote:
> I just had a look at the above mentioned problems and I am a bit unsure
> about their status. As far as I can see the fixes are not applied, the
> status in http://security-tracker.debian.org/tracker/source-package/libav
> still lists these issues as open, but the bug is closed.
> 
> Are these problems real? Are they fixed?

I had contacted the Google people, who discovered these issues and asked
for the reproducers, but I'm not sure if the libav developers have received
them. Reinhard?

Cheers,
        Moritz