Author: jmm
Date: 2011-04-17 17:02:34 +0000 (Sun, 17 Apr 2011)
New Revision: 16533
Modified:
data/CVE/list
Log:
Debian''s ffmpeg switched to the libav fork
Modified: data/CVE/list
==================================================================---
data/CVE/list 2011-04-16 17:57:50 UTC (rev 16532)
+++ data/CVE/list 2011-04-17 17:02:34 UTC (rev 16533)
@@ -1220,8 +1220,8 @@
- chromium-browser 10.0.648.127~r76697-1
[squeeze] - chromium-browser <not-affected>
[wheezy] - chromium-browser <not-affected>
- - ffmpeg <undetermined>
- TODO: need info on ffmpeg
+ - libav <undetermined>
+ TODO: need info on ffmpeg/libav
CVE-2011-1197 (Google Chrome before 10.0.648.127 does not properly perform
table ...)
{DSA-2189-1}
- chromium-browser 10.0.648.127~r76697-1
@@ -1231,8 +1231,8 @@
- chromium-browser 10.0.648.127~r76697-1
[squeeze] - chromium-browser <not-affected>
[wheezy] - chromium-browser <not-affected>
- - ffmpeg <undetermined>
- TODO: need info on ffmpeg
+ - libav <undetermined>
+ TODO: need info on ffmpeg/libav
CVE-2011-1195 (Use-after-free vulnerability in Google Chrome before
10.0.648.127 ...)
- chromium-browser 10.0.648.127~r76697-1
[squeeze] - chromium-browser <not-affected>
@@ -2948,7 +2948,8 @@
NOTE: recheck when 0.6.x gets uploaded
CVE-2010-4704 (libavcodec/vorbis_dec.c in the Vorbis decoder in FFmpeg 0.6.1
and ...)
{DSA-2165-1}
- - ffmpeg <unfixed> (low; bug #611495)
+ - libav 4:0.6.2-1 (low; bug #611495)
+ - ffmpeg <removed> (low; bug #611495)
- ffmpeg-debian <removed> (low)
NOTE: this is a crash found by fuzzing and not clearly exploitable (can be
combined with other fixes so low urgency)
CVE-2010-XXXX