[Git][security-tracker-team/security-tracker][master] ffmpeg triage

Moritz Muehlenhoff (@jmm) jmm at debian.org
Tue Oct 19 10:19:03 BST 2021



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
492684bb by Moritz Muehlenhoff at 2021-10-19T11:18:34+02:00
ffmpeg triage

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -82007,7 +82007,7 @@ CVE-2020-22039 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a
 	NOTE: https://trac.ffmpeg.org/ticket/8302
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=a581bb66ea5eb981e2e498ca301df7d1ef15a6a3
 CVE-2020-22038 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory ...)
-	- ffmpeg <unfixed> (unimportant)
+	- ffmpeg 7:4.4-5 (unimportant)
 	NOTE: https://trac.ffmpeg.org/ticket/8285
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=7c32e9cf93b712f8463573a59ed4e98fd10fa013
 CVE-2020-22037 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory ...)
@@ -85492,6 +85492,7 @@ CVE-2020-20445 (FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/
 	- ffmpeg <unfixed> (unimportant)
 	NOTE: https://trac.ffmpeg.org/ticket/7996
 	NOTE: Negligible security impact
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/38d18fb57863bb9c54e68ae44aa780c5c282a184
 CVE-2020-20444 (Jact OpenClinic 0.8.20160412 allows the attacker to read server files  ...)
 	NOT-FOR-US: Jact OpenClinic
 CVE-2020-20443



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/492684bb2c14cb9482316d653f7745a5f638bb00

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/492684bb2c14cb9482316d653f7745a5f638bb00
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211019/7104905c/attachment.htm>


More information about the debian-security-tracker-commits mailing list