[Git][security-tracker-team/security-tracker][master] mark CVE-2024-32228 as not-affected for Bullseye

[Thorsten Alteholz (@alteholz)]

Thorsten Alteholz pushed to branch master at Debian Security Tracker / security-tracker


Commits:
50fa7eb8 by Thorsten Alteholz at 2024-12-31T02:02:27+01:00
mark CVE-2024-32228 as not-affected for Bullseye

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -46347,7 +46347,7 @@ CVE-2024-32229 (FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_til
 CVE-2024-32228 (FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavc ...)
 	- ffmpeg 7:7.0.1-3
 	[bookworm] - ffmpeg <postponed> (Pick up when fixed in 5.1.x)
-	[bullseye] - ffmpeg <postponed> (Pick up when fixed in 4.3.x)
+	[bullseye] - ffmpeg <not-affected> (Vulnerable code introduced later)
 	NOTE: https://trac.ffmpeg.org/ticket/10951
 	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=459648761f5412acdc3317d5bac982ceaa257584
 CVE-2024-2819 (Incorrect Default Permissions, Improper Preservation of Permissions vu ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50fa7eb8ba1db0e19e256ab839078377acba01ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/50fa7eb8ba1db0e19e256ab839078377acba01ae
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241231/54560ffd/attachment.htm>