[Git][security-tracker-team/security-tracker][master] Add new ffmpeg issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
45ad2822 by Salvatore Bonaccorso at 2026-07-24T09:39:13+02:00
Add new ffmpeg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -11,13 +11,21 @@ CVE-2026-66138 (In OpenStack Ironic Python Agent through 11.6.0, aproject-scoped
 	NOTE: https://www.openwall.com/lists/oss-security/2026/07/23/5
 	NOTE: https://bugs.launchpad.net/ironic-python-agent/+bug/2160050
 CVE-2026-65706 (FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulne ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527
 CVE-2026-65705 (FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulne ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23780
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f186c50cf53aec20e9a29059cb22ca3f2d59201c
 CVE-2026-65704 (FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability tha ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23767
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/de771bd52774a52d45b0e2c82e56995a1ef40df7
 CVE-2026-65703 (FFmpeg versions 2.7 through 8.1.2 contain an out-of-bounds write vulne ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23773
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/fd3ee52fab34d98a95b787d0b5ff45685766200c
 CVE-2026-65694 (Microweber CMS through 2.0.20 contains a path traversal vulnerability  ...)
 	TODO: check
 CVE-2026-65604 (Skipper contains an incomplete fix for CVE-2026-50197 in which oversiz ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/45ad28222a2fba19a93f6d5adcbd2ecb43c13fdb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/45ad28222a2fba19a93f6d5adcbd2ecb43c13fdb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260724/e4a39518/attachment.htm>