[Git][security-tracker-team/security-tracker][master] Add new ffmpeg issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
62c7095d by Salvatore Bonaccorso at 2024-07-02T22:16:52+02:00
Add new ffmpeg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -255,11 +255,16 @@ CVE-2024-32853 (Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain a
 CVE-2024-32852 (Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of  ...)
 	NOT-FOR-US: Dell
 CVE-2024-32230 (FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size- ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://trac.ffmpeg.org/ticket/10952
+	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=96449cfeaeb95fcfd7a2b8d9ccf7719e97471ed1
 CVE-2024-32229 (FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandsh ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://trac.ffmpeg.org/ticket/10950
 CVE-2024-32228 (FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavc ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://trac.ffmpeg.org/ticket/10951
+	NOTE: https://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=459648761f5412acdc3317d5bac982ceaa257584
 CVE-2024-2819 (Incorrect Default Permissions, Improper Preservation of Permissions vu ...)
 	NOT-FOR-US: Hitachi
 CVE-2024-28200 (The N-central server is vulnerable to an authentication bypass of the  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62c7095da25a9ea2b2c801630bc8caa105cac255

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/62c7095da25a9ea2b2c801630bc8caa105cac255
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240702/05b10aef/attachment.htm>