[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add CVE-2018-6392/ffmpeg

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9ee990e2 by Salvatore Bonaccorso at 2018-02-01T21:01:03+01:00
Add CVE-2018-6392/ffmpeg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -199,7 +199,10 @@ CVE-2018-6394
 CVE-2018-6393 (FreePBX 10.13.66-32bit allows post-authentication SQL injection via the ...)
 	NOT-FOR-US: FreePBX
 CVE-2018-6392 (The filter_slice function in libavfilter/vf_transpose.c in FFmpeg ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	- libav <undetermined>
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/3f621455d62e46745453568d915badd5b1e5bcd5
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c6939f65a116b1ffed345d29d8621ee4ffb32235
 CVE-2018-6391 (A cross-site request forgery web vulnerability has been discovered on ...)
 	NOT-FOR-US: Netis WF2419 V2.2.36123 devices
 CVE-2018-6390 (The WStr::assign function in kso.dll in Kingsoft WPS Office 10.1.0.7106 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9ee990e26ecdfd455326e789a92785cfbf53fcd8

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9ee990e26ecdfd455326e789a92785cfbf53fcd8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180201/2c08a306/attachment-0001.html>