[FFmpeg-cvslog] add missed CVE reference in 9.2 release

Reinhard Tartler git at videolan.org
Sun May 12 12:13:35 CEST 2013


ffmpeg | branch: release/1.1 | Reinhard Tartler <siretart at tauware.de> | Sat Mar 23 08:29:04 2013 +0100| [9d5f16f6fe23640ee90c92b3737d9d30c2f994f3] | committer: Reinhard Tartler

add missed CVE reference in 9.2 release

> http://git.videolan.org/gitweb.cgi/ffmpeg.git/?a=commit;h=9d5f16f6fe23640ee90c92b3737d9d30c2f994f3
---

 Changelog |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Changelog b/Changelog
index 707bc69..7229eba 100644
--- a/Changelog
+++ b/Changelog
@@ -28,7 +28,7 @@ version 9.2:
 - libopencore-amr: Conditionally compile decoder and encoder bits
 - arm: Fall back to runtime cpu feature detection via /proc/cpuinfo
 - xxan: properly handle odd heights
-- msrledec: check bounds before constructing a possibly invalid pointer,
+- msrledec: check bounds before constructing a possibly invalid pointer (CVE-2496)
 - qtrle: fix the topmost line for 1bit
 - aasc: fix output for msrle compression
 - yop: check for input overreads



More information about the ffmpeg-cvslog mailing list