Author: jmm
Date: 2012-03-23 14:17:06 +0000 (Fri, 23 Mar 2012)
New Revision: 18742
Modified:
data/CVE/list
Log:
new ffmpeg/libav issues
kernel updates
Modified: data/CVE/list
==================================================================---
data/CVE/list 2012-03-23 09:14:36 UTC (rev 18741)
+++ data/CVE/list 2012-03-23 14:17:06 UTC (rev 18742)
@@ -1667,7 +1667,7 @@
TODO: check
CVE-2012-1097
RESERVED
- - linux-2.6 <unfixed> (low)
+ - linux-2.6 3.2.10-1 (low)
CVE-2012-1096
RESERVED
CVE-2012-1095
@@ -2231,6 +2231,8 @@
RESERVED
CVE-2012-0858
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2012-0857
RESERVED
CVE-2012-0856
@@ -2241,6 +2243,8 @@
RESERVED
CVE-2012-0853
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2012-0852
RESERVED
CVE-2012-0851
@@ -2251,6 +2255,8 @@
RESERVED
CVE-2012-0848
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2012-0847
RESERVED
CVE-2012-0846
@@ -5128,8 +5134,6 @@
[wheezy] - linux-2.6 <not-affected> (introduced in 3.2-rc1)
[squeeze] - linux-2.6 <not-affected> (introduced in 3.2-rc1)
[lenny] - linux-2.6 <not-affected> (introduced in 3.2-rc1)
- NOTE: fix is
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=69e4747ee9727d660b88d7e1efe0f4afcb35db1b
(queued for 3.3)
- NOTE: actually unfixed in experimental, not marked because of version
numbering
CVE-2012-0057 (PHP before 5.3.9 has improper libxslt security settings, which
allows ...)
{DSA-2399-1}
- php5 5.3.9-1 (bug #656308)
@@ -7666,8 +7670,12 @@
- webkit <undetermined>
CVE-2011-3952
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3951
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3950
RESERVED
CVE-2011-3949
@@ -7676,10 +7684,14 @@
RESERVED
CVE-2011-3947
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3946
RESERVED
CVE-2011-3945
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3944
RESERVED
CVE-2011-3943
@@ -7690,14 +7702,20 @@
RESERVED
CVE-2011-3940
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3939
RESERVED
CVE-2011-3938
RESERVED
CVE-2011-3937
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3936
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3935
RESERVED
CVE-2011-3934
@@ -7712,6 +7730,8 @@
RESERVED
CVE-2011-3929
RESERVED
+ - libav 4:0.8.1-1
+ - ffmpeg <removed>
CVE-2011-3928 (Use-after-free vulnerability in Google Chrome before 16.0.912.77
...)
- chromium-browser 16.0.912.77~r118311-1
- webkit <undetermined>
@@ -13710,8 +13730,7 @@
CVE-2011-1833
RESERVED
- ecryptfs-utils 92-1
- - linux-2.6 <unfixed>
- NOTE: kernel commit 764355487ea220fdc2faf128d577d7f679b91f97
+ - linux-2.6 3.1.1-1
NOTE: cannot be fixed in ecryptfs-utils (squeeze, lenny) until kernel fix is
in place
CVE-2011-1832
RESERVED
@@ -19417,7 +19436,7 @@
CVE-2010-4564
RESERVED
CVE-2010-4563 (The Linux kernel, when using IPv6, allows remote attackers to
...)
- - linux-2.6 <undetermined>
+ - linux-2.6 <unfixed> (unimportant)
NOTE: http://seclists.org/fulldisclosure/2011/Apr/254
CVE-2010-4562 (Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using
IPv6, ...)
NOT-FOR-US: Microsoft Windows