[Git][security-tracker-team/security-tracker][master] new ffmpeg issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
7ca1f40f by Moritz Muehlenhoff at 2026-08-31T16:11:09+02:00
new ffmpeg issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2377,7 +2377,11 @@ CVE-2026-38819 (Multiple memory leaks in openNDS before 11.0.0 allow an unauthen
 	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/f2332e68c6d34f8403db346e380fff3817020d5c (v11.0.0)
 	NOTE: Fixed by: https://github.com/openNDS/openNDS/commit/b2801d9f14af44a23be7e9a1c378623bc5947c4c (v11.0.0)
 CVE-2026-38350 (An integer overflow in the target_sws_fuzzer() function (libswscale/ou ...)
-	TODO: check
+	- ffmpeg 7:8.0.1-2
+	[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
+	NOTE: https://trac.ffmpeg.org/ticket/11686
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/20060
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/aca41d3d9327be4d6ab036f494b700118fcc04e1 (n8.0)
 CVE-2026-38349 (An integer overflow in the hScale16To19_c() function (libswscale/outpu ...)
 	- ffmpeg 7:8.1-1
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21592



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ca1f40f4d8d1f40961f4f4d62b350eb9d85f07c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/7ca1f40f4d8d1f40961f4f4d62b350eb9d85f07c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260831/927f8206/attachment.htm>