[Git][security-tracker-team/security-tracker][master] new ffmpeg issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dee75d4f by Moritz Muehlenhoff at 2026-09-15T13:43:56+02:00
new ffmpeg issues

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -138,9 +138,15 @@ CVE-2026-90819 (A weakness has been identified in a2aproject a2a-java 1.2.0. The
 CVE-2026-90818 (A security flaw has been discovered in netease-youdao LobsterAI 2026.6 ...)
 	NOT-FOR-US: netease-youdao LobsterAI
 CVE-2026-90816 (A vulnerability was found in FFmpeg 8.0.x. This affects the function p ...)
-	TODO: check
+	- ffmpeg 7:8.1-1
+	[trixie] - ffmpeg <ignored> (Minor issue, upstream fix remove this deprecated code entirely)
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4 (n8.1)
 CVE-2026-90815 (A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3 ...)
-	TODO: check
+	- ffmpeg 7:8.1-1
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1 (n8.1)
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c484631634b7abc1a74d1adfa2eef00012e92253 (n7.1.4)
 CVE-2026-90814 (A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13.  ...)
 	NOT-FOR-US: mercury-agent
 CVE-2026-90813 (A vulnerability was detected in cosmicstack-labs mercury-agent up to 1 ...)


=====================================
data/DSA/list
=====================================
@@ -722,7 +722,7 @@
 	{CVE-2026-6472 CVE-2026-6473 CVE-2026-6474 CVE-2026-6475 CVE-2026-6477 CVE-2026-6478 CVE-2026-6479 CVE-2026-6637}
 	[bookworm] - postgresql-15 15.18-0+deb12u1
 [14 May 2026] DSA-6268-1 ffmpeg - security update
-	{CVE-2026-40962 CVE-2026-38343 CVE-2026-38344 CVE-2026-38346 CVE-2026-38348 CVE-2026-38349 CVE-2026-52295}
+	{CVE-2026-40962 CVE-2026-38343 CVE-2026-38344 CVE-2026-38346 CVE-2026-38348 CVE-2026-38349 CVE-2026-52295 CVE-2026-90815}
 	[trixie] - ffmpeg 7:7.1.4-0+deb13u1
 [14 May 2026] DSA-6267-1 thunderbird - security update
 	{CVE-2026-8090 CVE-2026-8092 CVE-2026-8094}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee75d4f516ad1d9deaf6993b6c14cafd1d5bafe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dee75d4f516ad1d9deaf6993b6c14cafd1d5bafe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260915/4d1bab4c/attachment.htm>