[Git][security-tracker-team/security-tracker][master] Add more ffmpeg issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
245f7046 by Salvatore Bonaccorso at 2026-10-09T12:28:45+02:00
Add more ffmpeg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -515,21 +515,40 @@ CVE-2026-107698 (FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-si
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/7c011995e394e04f685d6674727dd490cfb297ba (n7.1.4)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b05562b9b399057b6537fae337d0eeabcff6ef5c (n5.1.9)
 CVE-2026-107697 (FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS ...)
-	TODO: check
+	- ffmpeg 7:9.0.2-1
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323 (master)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/01044d04536eec6e2f5f48ef404cf45d15feb461 (n9.0)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/191715f0232cee64402c3e7733f28ff4061224b6 (n8.1.3)
 CVE-2026-107696 (FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rts ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902
 CVE-2026-107695 (FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS ...)
-	TODO: check
+	- ffmpeg 7:9.0.2-1
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5 (master)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0e6eef35517af086419c5157980e926a81070c2a (n9.0)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a4ddaba8bb7811b1a3afaad59fe6555e720d4754 (n8.1.3)
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618
 CVE-2026-107678 (FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_e ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593
 CVE-2026-107677 (FFmpeg through 9.0.2 contains a denial of service vulnerability in the ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778e (master)
 CVE-2026-107676 (FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulne ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f (master)
 CVE-2026-107675 (FFmpeg through 9.0.2 contains a missing host key verification vulnerab ...)
-	TODO: check
+	- ffmpeg <unfixed>
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce (master)
 CVE-2026-107660 (FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certific ...)
-	TODO: check
+	- ffmpeg 7:9.0.2-1
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24383
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/57a2e704b4a6eda5d061b45aacde6b19c026bfc0 (master)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29 (n9.0.2)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f (n8.1.3)
 CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow e ...)
 	- eog <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/245f7046049f42d7ecd924062f67a0ad9ecdd087

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/245f7046049f42d7ecd924062f67a0ad9ecdd087
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261009/c5078a51/attachment.htm>