[Git][security-tracker-team/security-tracker][master] ffmpeg triage

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
79df7e30 by Moritz Muehlenhoff at 2021-05-27T17:13:55+02:00
ffmpeg triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -53230,6 +53230,8 @@ CVE-2020-24021
 	RESERVED
 CVE-2020-24020 (Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad ...)
 	- ffmpeg 7:4.3.1-1
+	[bullseye] - ffmpeg <not-affected> (Vulnerable code not present)
+	[buster] - ffmpeg <not-affected> (Vulnerable code not present)
 	NOTE: https://trac.ffmpeg.org/ticket/8718
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=584f396132aa19d21bb1e38ad9a5d428869290cb
 CVE-2020-24019
@@ -57254,6 +57256,7 @@ CVE-2020-22021 (Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges func
 	TODO: check
 CVE-2020-22020 (Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map func ...)
 	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
 	NOTE: https://trac.ffmpeg.org/ticket/8239
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=ce5274c1385d55892a692998923802023526b765
 CVE-2020-22019 (Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in  ...)
@@ -57266,8 +57269,9 @@ CVE-2020-22016
 	RESERVED
 CVE-2020-22015 (Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due ...)
 	- ffmpeg <unfixed>
+	[bullseye] - ffmpeg <ignored> (Minor issue)
+	[buster] - ffmpeg <ignored> (Minor issue)
 	NOTE: https://trac.ffmpeg.org/ticket/8190
-	TODO: check details
 CVE-2020-22014
 	RESERVED
 CVE-2020-22013
@@ -59220,6 +59224,7 @@ CVE-2020-21042
 CVE-2020-21041 (Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse ...)
 	[experimental] - ffmpeg 7:4.4-1
 	- ffmpeg <unfixed>
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
 	NOTE: https://trac.ffmpeg.org/ticket/7989
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=5d9f44da460f781a1604d537d0555b78e29438ba
 CVE-2020-21040



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79df7e3056c4c428b90d084d5a401a41cbf73a43

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79df7e3056c4c428b90d084d5a401a41cbf73a43
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210527/a4537c1e/attachment-0001.htm>