Author: gilbert-guest
Date: 2012-01-05 00:29:22 +0000 (Thu, 05 Jan 2012)
New Revision: 18038
Modified:
data/CVE/list
doc/narrative_introduction
Log:
libav mainainers indicate that individual CVEs should be submitted as separate
bugs
Modified: data/CVE/list
==================================================================---
data/CVE/list 2012-01-04 21:50:25 UTC (rev 18037)
+++ data/CVE/list 2012-01-05 00:29:22 UTC (rev 18038)
@@ -3864,7 +3864,7 @@
- chromium-browser 15.0.874.121~r109964-1
- webkit <not-affected> (Chrome issue)
- ffmpeg <removed>
- - libav <unfixed> (bug #654534)
+ - libav <unfixed> (bug #654534; bug #654573)
CVE-2011-3894 (Google Chrome before 15.0.874.120 does not properly perform VP8
...)
- chromium-browser 15.0.874.121~r109964-1
- webkit <not-affected> (Chrome issue)
@@ -3872,7 +3872,7 @@
CVE-2011-3893 (Google Chrome before 15.0.874.120 does not properly implement
the MKV ...)
- chromium-browser 15.0.874.121~r109964-1
- webkit <not-affected> (Chrome issue)
- - libav <unfixed> (bug #654534)
+ - libav <unfixed> (bug #654534; bug #654572)
- ffmpeg <removed>
[squeeze] - chromium-browser <not-affected>
NOTE: this is due to http://llvm.org/bugs/show_bug.cgi?id=7554
@@ -3882,7 +3882,7 @@
- chromium-browser 15.0.874.121~r109964-1
- webkit <not-affected> (Chrome issue)
[squeeze] - chromium-browser <not-affected>
- - libav <unfixed> (bug #654534)
+ - libav <unfixed> (bug #654534; bug #654571)
- ffmpeg <removed>
NOTE: http://src.chromium.org/viewvc/chrome?view=rev&revision=107489
CVE-2011-3891 (Google Chrome before 15.0.874.102 does not properly restrict
access to ...)
Modified: doc/narrative_introduction
==================================================================---
doc/narrative_introduction 2012-01-04 21:50:25 UTC (rev 18037)
+++ doc/narrative_introduction 2012-01-05 00:29:22 UTC (rev 18038)
@@ -272,6 +272,7 @@
indicated a preference for only one issue per bug report. The following
is a list of packages for which each CVE should be reported separately:
- php5
+ - libav
A special exception is made for kernel related issues. The kernel-sec group
will take care of them. It is not necessary to file bugs in the BTS for kernel