oss-sec mailing list archives

ffmpeg/libav CVE dupe


From: Moritz Muehlenhoff <jmm () debian org>
Date: Sun, 20 Jan 2013 22:54:10 +0100

Hi,
there seems to be a dupe in the assignments for the recent
round of ffmpeg/libav security updates:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2777
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2784

While the description states that it's a different issue,
the only actual issue is the typo in the git commit URL in
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2784

I think it makes sense to reject CVE-2012-2784.

Cheers,
        Moritz


Current thread: