[Git][security-tracker-team/security-tracker][master] 2 commits: Fix tag annotation for CVE-2026-70631

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
580241cc by Salvatore Bonaccorso at 2026-09-21T17:29:42+02:00
Fix tag annotation for CVE-2026-70631

- - - - -
32a87156 by Salvatore Bonaccorso at 2026-09-21T17:39:31+02:00
Adjust notes for two CVEs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -58862,7 +58862,7 @@ CVE-2026-70631 (FFmpeg versions from 0.5 up to, but not including, 9.0 contain a
 	- ffmpeg 7:9.0.2-1
 	[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899
-	NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7 ((v0.5)
+	NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7 (v0.5)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f (master)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb (n9.0)
 CVE-2026-70630 (FFmpeg versions from 3.0 up to, but not including, 9.0 contain an unin ...)
@@ -70352,8 +70352,8 @@ CVE-2026-66041 (FFmpeg 7.0 through 8.1.2, fixed in commit 4da9812, contains a he
 	[bookworm] - ffmpeg <not-affected> (Vulnerable code not present)
 	[bullseye] - ffmpeg <not-affected> (Vulnerable code not present)
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23625
-	NOTE: Fixed by https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 (master)
-	NOTE: Fixed by https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c20d78c6838ae62e9954163833d24fc0ed1b74a3 (n9.0)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4da9812e25894fb51d62a8875cfa8eb39b5e20f5 (master)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c20d78c6838ae62e9954163833d24fc0ed1b74a3 (n9.0)
 	NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/030e1401451200566a5303f35cbe1456e31dd81e (n7.0)
 CVE-2026-66040 (FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of- ...)
 	- ffmpeg 7:9.0.2-1
@@ -70953,7 +70953,7 @@ CVE-2026-65706 (FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write
 	- ffmpeg 7:9.0.2-1
 	[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
 	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23779
-	NOTE: Fixed by https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527 (master)
+	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a7e38b617b32f996beaa371bbf04b39907d7a527 (master)
 	NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b3c7ebc1edc401fd9881277fdfae93f3f24ceb81 (n9.0)
 CVE-2026-65705 (FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulne ...)
 	- ffmpeg 7:9.0.2-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/73d91e82e068a76b6cbb1e494c9279ab594707f6...32a871568ba8b73a639b8bf5d2223d8ffd33f42d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/73d91e82e068a76b6cbb1e494c9279ab594707f6...32a871568ba8b73a639b8bf5d2223d8ffd33f42d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260921/7792a8b4/attachment.htm>