[Git][security-tracker-team/security-tracker][master] Add CVE-2020-36138/ffmpeg

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8cb5ead1 by Salvatore Bonaccorso at 2023-08-12T21:32:46+02:00
Add CVE-2020-36138/ffmpeg

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -188052,7 +188052,10 @@ CVE-2020-36140 (BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via
 CVE-2020-36139 (BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnera ...)
 	NOT-FOR-US: BloofoxCMS
 CVE-2020-36138 (An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg ...)
-	TODO: check
+	- ffmpeg <not-affected> (Only affects 4.4 development branches)
+	NOTE: https://trac.ffmpeg.org/ticket/8960
+	NOTE: Fixed by: https://github.com/FFmpeg/FFmpeg/commit/292e41ce650a7b5ca5de4ae87fff0d6a90d9fc97 (n4.4)
+	NOTE: Regression from: https://github.com/FFmpeg/FFmpeg/commit/da5b3d002862d1e105002a6dc1567e6551860896 (n4.4)
 CVE-2020-36137
 	RESERVED
 CVE-2020-36136 (SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows att ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cb5ead15fff8ae2b54a813663dee1a32f1f1ecf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8cb5ead15fff8ae2b54a813663dee1a32f1f1ecf
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230812/96f90f1d/attachment.htm>