[Git][security-tracker-team/security-tracker][master] ffmpeg issues fixed in sid
Moritz Muehlenhoff (@jmm)
jmm at debian.org
Sun Sep 20 12:16:16 BST 2026
Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits:
5d2af9b9 by Moritz Muehlenhoff at 2026-09-20T13:15:53+02:00
ffmpeg issues fixed in sid
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -39124,7 +39124,7 @@ CVE-2026-75149 (marimo before 0.23.15 contains a code injection vulnerability in
CVE-2026-75148 (cgltf through 1.15 contains an integer overflow vulnerability in the n ...)
NOT-FOR-US: cgltf
CVE-2026-75147 (FFmpeg before commit 983dae9 contains an out-of-bounds read in the AV1 ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <not-affected> (Vulnerable code not present)
[bookworm] - ffmpeg <not-affected> (Vulnerable code not present)
[bullseye] - ffmpeg <not-affected> (Vulnerable code not present)
@@ -39133,13 +39133,13 @@ CVE-2026-75147 (FFmpeg before commit 983dae9 contains an out-of-bounds read in t
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/f175bd50821f9adcded3acacc6b8e04037a92715 (n9.0.1)
NOTE: Introduced by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/330c8f8b936de66d08d5c462845e7fdcbc637b75 (n8.0)
CVE-2026-75146 (FFmpeg before commit 65b0dab contains an out-of-bounds read in the DAS ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24093
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/65b0dab903e5975e036b30ecc58f5935d4f151e0 (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/999f8ba75ce0bf1167677de7e11a5af678fdb866 (n9.0.1)
CVE-2026-75145 (FFmpeg before commit b4c199c contains an incorrect integer narrowing c ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <not-affected> (Vulnerable code not present)
[bookworm] - ffmpeg <not-affected> (Vulnerable code not present)
[bullseye] - ffmpeg <not-affected> (Vulnerable code not present)
@@ -39148,25 +39148,25 @@ CVE-2026-75145 (FFmpeg before commit b4c199c contains an incorrect integer narro
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/7646bb4c42e6837a9396c3d9ab8d8cf476e2053b (n9.0.1)
NOTE: Introduced by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/330c8f8b936de66d08d5c462845e7fdcbc637b75 (n8.0)
CVE-2026-75144 (FFmpeg before commit 1cdeb3c contains a heap buffer overflow vulnerabi ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24091
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1cdeb3c4e7f1f8566d846b9b451e01c376398818 (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1afd5c3ddafda4209e0881cd30684b919e99de7c (n9.0.1)
CVE-2026-75143 (FFmpeg before commit 1c10bcc contains a heap buffer overflow in the RI ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24089
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1c10bcc2e17255dacb717a25ab3db142ce390602 (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/8880a174d08131f94f58a0492d1c8c6d68b74f67 (n9.0.1)
CVE-2026-75142 (FFmpeg before commit 9d786e4 contains a stack buffer overflow in the M ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24087
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9d786e4b5e9b8482651928574de33772aeee7be1 (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b274f0d21ba684446fd59b49e00f3f8e9ed954df (n9.0.1)
CVE-2026-75141 (FFmpeg before commit acf5d7c contains a heap buffer overflow in the hv ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781 (master)
@@ -58504,35 +58504,35 @@ CVE-2026-70634 (TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an
CVE-2026-70633 (TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-o ...)
NOT-FOR-US: Timescale TimescaleDB
CVE-2026-70632 (FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out- ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e (n4.4)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9 (n9.0)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087 (master)
CVE-2026-70631 (FFmpeg versions from 0.5 up to, but not including, 9.0 contain an unin ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7 ((v0.5)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb (n9.0)
CVE-2026-70630 (FFmpeg versions from 3.0 up to, but not including, 9.0 contain an unin ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa (n3.0)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62 (n9.0)
CVE-2026-70629 (FFmpeg versions from 3.0 up to, but not including, 9.0 contain an unin ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc (n3.0)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7 (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4 (n9.0)
CVE-2026-70628 (FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signe ...)
- - ffmpeg <unfixed>
+ - ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c (v0.5)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d2af9b92690bd9f1f186f9f31d9a212c7ce3773
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5d2af9b92690bd9f1f186f9f31d9a212c7ce3773
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260920/2e55cc0f/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list