[Git][security-tracker-team/security-tracker][master] more ffmpeg fixes in sid

Moritz Muehlenhoff (@jmm) jmm at debian.org
Sun Oct 31 17:09:32 GMT 2021



Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a5f9d653 by Moritz Mühlenhoff at 2021-10-31T18:08:59+01:00
more ffmpeg fixes in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -12426,7 +12426,7 @@ CVE-2021-38292
 	RESERVED
 CVE-2021-38291 (FFmpeg version (git commit de8e6e67e7523e48bb27ac224a0b446df05e1640) s ...)
 	{DSA-4990-1}
-	- ffmpeg <unfixed> (unimportant)
+	- ffmpeg 7:4.4.1-1 (unimportant)
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=e01d306c647b5827102260b885faa223b646d2d1
 	NOTE: https://trac.ffmpeg.org/ticket/9312
 	NOTE: Negligible security impact
@@ -82967,7 +82967,7 @@ CVE-2020-22043 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=b288a7eb3d963a175e177b6219c8271076ee8590
 	NOTE: Negligible security impact
 CVE-2020-22042 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory ...)
-	- ffmpeg <unfixed> (unimportant)
+	- ffmpeg 7:4.4-5 (unimportant)
 	NOTE: https://trac.ffmpeg.org/ticket/8267
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=426c16d61a9b5056a157a1a2a057a4e4d13eef84
 CVE-2020-22041 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory ...)
@@ -82988,10 +82988,9 @@ CVE-2020-22038 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=7c32e9cf93b712f8463573a59ed4e98fd10fa013
 CVE-2020-22037 (A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory ...)
 	{DSA-4990-1}
-	- ffmpeg <unfixed> (unimportant)
+	- ffmpeg 7:4.4.1-1 (unimportant)
 	NOTE: https://trac.ffmpeg.org/ticket/8281
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=7bba0dd6382e30d646cb406034a66199e071d713
-	NOTE: Pending for 4.4.1
 CVE-2020-22036 (A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in fil ...)
 	{DSA-4990-1 DLA-2742-1}
 	- ffmpeg 7:4.3-2
@@ -86437,11 +86436,10 @@ CVE-2020-20454
 	RESERVED
 CVE-2020-20453 (FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccod ...)
 	{DSA-4990-1}
-	- ffmpeg <unfixed> (unimportant)
+	- ffmpeg 7:4.4.1-1 (unimportant)
 	NOTE: https://trac.ffmpeg.org/ticket/8003
 	NOTE: Negligible security impact
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=a7a7f32c8ad0179a1a85d0a8cff35924e6d90be8
-	NOTE: Pending for 4.4.1
 CVE-2020-20452
 	RESERVED
 CVE-2020-20451 (Denial of Service issue in FFmpeg 4.2 due to resource management error ...)
@@ -86469,11 +86467,10 @@ CVE-2020-20447
 	RESERVED
 CVE-2020-20446 (FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy ...)
 	{DSA-4990-1}
-	- ffmpeg <unfixed> (unimportant)
+	- ffmpeg 7:4.4.1-1 (unimportant)
 	NOTE: https://trac.ffmpeg.org/ticket/7995
 	NOTE: Negligible security impact
 	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/223b5e8ac9f6461bb13ed365419ec485c5b2b002
-	NOTE: Pending for 4.4.1
 CVE-2020-20445 (FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, ...)
 	{DSA-4990-1}
 	- ffmpeg <unfixed> (unimportant)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5f9d653926bc48ad6268a39f239aeca83609019

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a5f9d653926bc48ad6268a39f239aeca83609019
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20211031/a7823e28/attachment.htm>


More information about the debian-security-tracker-commits mailing list