[Git][security-tracker-team/security-tracker][master] Add CVE-2020-13904/ffmpeg

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6ab2dc89 by Salvatore Bonaccorso at 2020-06-08T06:14:17+02:00
Add CVE-2020-13904/ffmpeg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,7 +7,9 @@ CVE-2020-13906
 CVE-2020-13905
 	RESERVED
 CVE-2020-13904 (FFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an  ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://patchwork.ffmpeg.org/project/ffmpeg/patch/20200529033905.41926-1-lq@chinaffmpeg.org/
+	NOTE: https://trac.ffmpeg.org/ticket/8673
 CVE-2020-13903
 	RESERVED
 CVE-2020-13902 (ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-re ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ab2dc89eabbca287e0ed9114fef01197593f624

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6ab2dc89eabbca287e0ed9114fef01197593f624
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20200608/a51a1970/attachment.html>