~ubuntu-security/ubuntu-cve-tracker/master

Viewing changes to retired/CVE-2013-0846

Committer: Marc Deslauriers
Date: 2013-11-04 16:43:16 UTC
Revision ID: marc.deslauriers@canonical.com-20131104164316-a51dv25mr6fd5ewf

The ffmpeg and libav codebases have diverged to the point of no longer
being able to assume ffmpeg CVEs also apply to libav.

- added README.libav
- removed 00boilerplate.ffmpeg
- mark libav as ignored/not-affected in ffmpeg CVEs

files added:
README.libav

files removed:
active/00boilerplate.ffmpeg

files renamed:
active/CVE-2012-2802 => retired/CVE-2012-2802

active/CVE-2013-0844 => retired/CVE-2013-0844

active/CVE-2013-0845 => retired/CVE-2013-0845

active/CVE-2013-0846 => retired/CVE-2013-0846

active/CVE-2013-0847 => retired/CVE-2013-0847

active/CVE-2013-0848 => retired/CVE-2013-0848

active/CVE-2013-0849 => retired/CVE-2013-0849

active/CVE-2013-0850 => retired/CVE-2013-0850

active/CVE-2013-0851 => retired/CVE-2013-0851

active/CVE-2013-0852 => retired/CVE-2013-0852

active/CVE-2013-0853 => retired/CVE-2013-0853

active/CVE-2013-0854 => retired/CVE-2013-0854

active/CVE-2013-0855 => retired/CVE-2013-0855

active/CVE-2013-0856 => retired/CVE-2013-0856

active/CVE-2013-0857 => retired/CVE-2013-0857

active/CVE-2013-0858 => retired/CVE-2013-0858

active/CVE-2013-0859 => retired/CVE-2013-0859

active/CVE-2013-0860 => retired/CVE-2013-0860

active/CVE-2013-0861 => retired/CVE-2013-0861

active/CVE-2013-0862 => retired/CVE-2013-0862

active/CVE-2013-0863 => retired/CVE-2013-0863

active/CVE-2013-0864 => retired/CVE-2013-0864

active/CVE-2013-0865 => retired/CVE-2013-0865

active/CVE-2013-0866 => retired/CVE-2013-0866

active/CVE-2013-0867 => retired/CVE-2013-0867

active/CVE-2013-0868 => retired/CVE-2013-0868

active/CVE-2013-0869 => retired/CVE-2013-0869

active/CVE-2013-0870 => retired/CVE-2013-0870

active/CVE-2013-0872 => retired/CVE-2013-0872

active/CVE-2013-0873 => retired/CVE-2013-0873

active/CVE-2013-0874 => retired/CVE-2013-0874

active/CVE-2013-0875 => retired/CVE-2013-0875

active/CVE-2013-0876 => retired/CVE-2013-0876

active/CVE-2013-0877 => retired/CVE-2013-0877

active/CVE-2013-0878 => retired/CVE-2013-0878

active/CVE-2013-3670 => retired/CVE-2013-3670

active/CVE-2013-3671 => retired/CVE-2013-3671

active/CVE-2013-3672 => retired/CVE-2013-3672

active/CVE-2013-3673 => retired/CVE-2013-3673

active/CVE-2013-3674 => retired/CVE-2013-3674

active/CVE-2013-3675 => retired/CVE-2013-3675

active/CVE-2013-4263 => retired/CVE-2013-4263

active/CVE-2013-4358 => retired/CVE-2013-4358

Show diffs side-by-side

added added

removed removed

retired/CVE-2013-0846

[libavcodec/qdm2.c out of array accesses]

Ubuntu-Description:

Notes:

mdeslaur> ffmpeg-extra in multiverse needs to have matching version

mdeslaur> libav-extra is built with tarball produced by libav package

jdstrand> no equivalent fix in 0.8.x as of 2013-07-30

mdeslaur> libav and ffmpeg codebases have diverged to the point of

mdeslaur> not being able to track both using the same CVE numbers.

mdeslaur> Marking this CVE as ignored for libav.

Bugs:

Priority: medium

Discovered-by:

upstream: http://git.libav.org/?p=libav.git;a=commit;h=39bec05ed42e505d17877b0c23f16322f9b5883b (trunk)

upstream_libav: needs-triage

lucid_libav: DNE

precise_libav: deferred (2013-07-30)

quantal_libav: deferred (2013-07-30)

raring_libav: deferred (2013-07-30)

saucy_libav: deferred (2013-07-30)

devel_libav: deferred (2013-07-30)

precise_libav: ignored

quantal_libav: ignored

raring_libav: ignored

saucy_libav: ignored

devel_libav: ignored

Patches_libav-extra:

upstream_libav-extra: needs-triage

lucid_libav-extra: DNE

precise_libav-extra: deferred (2013-07-30)

quantal_libav-extra: deferred (2013-07-30)

raring_libav-extra: deferred (2013-07-30)

saucy_libav-extra: deferred (2013-07-30)

devel_libav-extra: deferred (2013-07-30)

precise_libav-extra: ignored

quantal_libav-extra: ignored

raring_libav-extra: ignored

saucy_libav-extra: ignored

devel_libav-extra: ignored

Older »