[Git][security-tracker-team/security-tracker][master] lts: mark CVE-2026-52297,CVE-2026-96611/ffmpeg as not affecting Bookworm

[Daniel Leidert (@dleidert)]

Daniel Leidert pushed to branch master at Debian Security Tracker / security-tracker


Commits:
434966ad by Daniel Leidert at 2026-10-29T00:57:30+01:00
lts: mark CVE-2026-52297,CVE-2026-96611/ffmpeg as not affecting Bookworm

In both cases, the vulnerable code is not present.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -52149,6 +52149,7 @@ CVE-2026-96651 (Plex Media Server before 1.43.3.10861 builds a file path from th
 CVE-2026-96611 (FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c.  ...)
 	{DSA-6361-1}
 	- ffmpeg 7:8.1.2-1
+	[bookworm] - ffmpeg <not-affected> (Vulnerable code not present)
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23455
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2cc7b87bdb75bcb59bf8bcd5296ca43f89b3a909 (n9.0)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/31a192f5dd75be9f7520db29ce44fa8f36ae8ba3 (n8.1.2)
@@ -68689,6 +68690,7 @@ CVE-2026-68955 (The installer for Rakuten Kobo Desktop Application (Windows vers
 CVE-2026-52297 (FFmpeg before 9.0 has an out-of-bounds read because there is insuffici ...)
 	{DSA-6361-1}
 	- ffmpeg 7:8.1.1-1
+	[bookworm] - ffmpeg <not-affected> (Vulnerable code not present)
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22988
 	NOTE: Fixed by: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/8439e0203744a30d280668fcd086f74ed5001da1 (n9.0)
 	NOTE: Fixed by: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/7d612d27aea2ee7d7de291348bd7f02d64b1988b (n8.1.1)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/434966ad65e2a321b8902c0a0020e86678459cb5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/434966ad65e2a321b8902c0a0020e86678459cb5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/0101f2f5/attachment.htm>