[Git][security-tracker-team/security-tracker][master] new ffmpeg issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d901ad56 by Moritz Muehlenhoff at 2026-08-31T09:52:17+02:00
new ffmpeg issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1301,7 +1301,9 @@ CVE-2026-19084 (The shared-files-pro WordPress plugin before 1.7.70 does not val
 CVE-2026-18918 (In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authorization che ...)
 	NOT-FOR-US: Eclipse Lyo
 CVE-2026-18393 (A flaw was found in FFmpeg. The tdsc_load_cursor() function writes bey ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/242ff799c75f20bade946314c8d741d0887ee11c (n9.0)
 CVE-2026-15603 (morgan is an HTTP request logger middleware for Node.js. In versions p ...)
 	- node-morgan <unfixed>
 	[trixie] - node-morgan <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d901ad56743b4d0b3d7a77b26f9f4744f341fc22

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d901ad56743b4d0b3d7a77b26f9f4744f341fc22
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/18e8eacd/attachment.htm>