[Git][security-tracker-team/security-tracker][master] 2 commits: Add CVE-2026-90816/ffmpeg

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c33158b8 by Salvatore Bonaccorso at 2026-09-15T14:17:34+02:00
Add CVE-2026-90816/ffmpeg

- - - - -
1c8f8a6f by Salvatore Bonaccorso at 2026-09-15T14:18:11+02:00
Add CVE-2026-90815/ffmpeg

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -141,12 +141,18 @@ CVE-2026-90816 (A vulnerability was found in FFmpeg 8.0.x. This affects the func
 	- ffmpeg 7:8.1-1
 	[trixie] - ffmpeg <ignored> (Minor issue, upstream fix remove this deprecated code entirely)
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21492
-	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4 (n8.1)
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/64fafd63f0b4ebf8dbbdbdc2296f21a03548b5fc (n8.1)
 CVE-2026-90815 (A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3 ...)
 	- ffmpeg 7:8.1-1
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/issues/21487
-	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1 (n8.1)
-	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c484631634b7abc1a74d1adfa2eef00012e92253 (n7.1.4)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8970658472d1cb62d663ece0b6cacf4a1f465da3 (n8.1)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/e24b9820b46e74eb8c50eb23c9d34cae2b0dbf45 (n8.1)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/66e3368149ea8d39a35f9e72cfdd2823793bbd4b (n8.0.2)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d9fb549a89fdfa939dfd6683035bf4b9b4dee2c7 (n8.0.2)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/eca698e916f3a3b9e8f1e308dd7b9c94465ca5af (n7.1.4)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c484631634b7abc1a74d1adfa2eef00012e92253 (n7.1.4)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3a91d7b4fe6429d3bf8afda02f994de0ebd17ebe (n5.1.9)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c1d40519d6d2d5dd9bf24c8611e7d966d1531039 (n5.1.9)
 CVE-2026-90814 (A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13.  ...)
 	NOT-FOR-US: mercury-agent
 CVE-2026-90813 (A vulnerability was detected in cosmicstack-labs mercury-agent up to 1 ...)


=====================================
data/DSA/list
=====================================
@@ -696,7 +696,7 @@
 	[bookworm] - openjpeg2 2.5.0-2+deb12u3
 	[trixie] - openjpeg2 2.5.3-2.1~deb13u2
 [15 May 2026] DSA-6276-1 ffmpeg - security update
-	{CVE-2026-40962 CVE-2026-30997 CVE-2026-38343 CVE-2026-38344 CVE-2026-38346 CVE-2026-38348 CVE-2026-38349}
+	{CVE-2026-40962 CVE-2026-30997 CVE-2026-38343 CVE-2026-38344 CVE-2026-38346 CVE-2026-38348 CVE-2026-38349 CVE-2026-90815}
 	[bookworm] - ffmpeg 7:5.1.9-0+deb12u1
 [15 May 2026] DSA-6275-1 linux - security update
 	{CVE-2026-46333}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6b47dd8be9191e0035b6ffe568536b0b369acb7b...1c8f8a6f14dfa08fa2d8cd1fb91a0490a58fd1a3

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/6b47dd8be9191e0035b6ffe568536b0b369acb7b...1c8f8a6f14dfa08fa2d8cd1fb91a0490a58fd1a3
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260915/20225a05/attachment.htm>