http://bugzilla.opensuse.org/show_bug.cgi?id=1074593 Victor Pereira changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|VUL-0: CVE-2017-1000460: |VUL-0: CVE-2017-1000460: |chromium: In line |chromium: In line |libavcodec/h264dec.c:500 in |libavcodec/h264dec.c:500 in |libav(v13_dev0), |libav(v13_dev0), the return |ffmpeg(n3.4), |value of init_get_bits is |chromium(56prior Feb 13, |ignored |2017), the return value of |andget_ue_golomb(&gb) is |init_get_bits is ignored |called on an uninitialized |andget_ue_golomb(&gb) is |get_bits context, |called on an uninitialized | |get_bits context, | -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1074593 http://bugzilla.opensuse.org/show_bug.cgi?id=1074593#c1 Tomáš Chvátal changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|tchvatal@suse.com |security-team@suse.de --- Comment #1 from Tomáš Chvátal --- We ain't affected. We use system ffmpeg. The source gets pruned prior building. -- You are receiving this mail because: You are on the CC list for the bug.