[Git][security-tracker-team/security-tracker][master] new ffmpeg issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e12a852a by Moritz Muehlenhoff at 2021-09-22T13:52:05+02:00
new ffmpeg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -80103,21 +80103,45 @@ CVE-2020-20899 (Buffer Overflow vulnerability in function config_props in libavf
 	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=8c3166e1c302c3ba80d9742ae46161c0fa8e2606
 	NOTE: https://trac.ffmpeg.org/ticket/8261
 CVE-2020-20898 (Integer Overflow vulnerability in function filter16_prewitt in libavfi ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <ignored> (Minor issue)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/99f8d32129dd233d4eb2efa44678a0bc44869f23
+	NOTE: https://trac.ffmpeg.org/ticket/8263
 CVE-2020-20897 (Buffer Overflow vulnerability in function filter_slice in libavfilter/ ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/0749082eb93ea02fa4b770da86597450cec84054
+	NOTE: https://trac.ffmpeg.org/ticket/8262
 CVE-2020-20896 (An issue was discovered in function latm_write_packet in libavformat/l ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/dd01947397b98e94c3f2a79d5820aaf4594f4d3b
+	NOTE: https://trac.ffmpeg.org/ticket/8273
 CVE-2020-20895 (Buffer Overflow vulnerability in function filter_vertically_##name in  ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/f069a9c2a65bc20c3462127623127df6dfd06c5b
+	NOTE: https://trac.ffmpeg.org/ticket/8274
 CVE-2020-20894 (Buffer Overflow vulnerability in function gaussian_blur in libavfilter ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/ccf4ab8c9aca0aee66bcc2914031a9c97ac0eeb8
+	NOTE: https://trac.ffmpeg.org/ticket/8260
 CVE-2020-20893 (Buffer Overflow vulnerability in function activate in libavfilter/af_a ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/e1b89c76f66343d1b495165664647317c66764bb
+	NOTE: https://trac.ffmpeg.org/ticket/8276
 CVE-2020-20892 (An issue was discovered in function filter_frame in libavfilter/vf_len ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <ignored> (Minor issue)
+	NOTE: http://git.videolan.org/?p=ffmpeg.git;a=commit;h=19587c9332f5be4f6bc6d7b2b8ef3fd21dfeaa01
+	NOTE: https://trac.ffmpeg.org/ticket/8265
 CVE-2020-20891 (Buffer Overflow vulnerability in function config_input in libavfilter/ ...)
-	TODO: check
+	- ffmpeg 7:4.3-2
+	[buster] - ffmpeg <postponed> (Wait for 4.1.7)
+	NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/64a805883d7223c868a683f0030837d859edd2ab
+	NOTE: https://trac.ffmpeg.org/ticket/8282
 CVE-2020-20890
 	RESERVED
 CVE-2020-20889



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e12a852a040ef0c0a17a4be2e40ebde5cfaf0b9e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e12a852a040ef0c0a17a4be2e40ebde5cfaf0b9e
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210922/fc02d6a0/attachment.htm>