[Git][security-tracker-team/security-tracker][master] Add upstream tags for two commits
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Mon Sep 21 16:59:55 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
b31ccd70 by Salvatore Bonaccorso at 2026-09-21T17:59:18+02:00
Add upstream tags for two commits
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -72148,7 +72148,7 @@ CVE-2026-64832 (FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerab
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/72982f8cb5dad6252a14226d28128313eed4a5ff (n4.4)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/4c6217477fc64305055b37d9d1d0d76d30e37f97 (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3d5ad47c40436dbdeaaa6601af0bb4575d5aa3c5 (n9.0)
- NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9cbcf979a587a66b280496657d00fabe301bf20f (release/8.1)
+ NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9cbcf979a587a66b280496657d00fabe301bf20f (n8.1.3)
CVE-2026-64831 (FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vul ...)
- ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <not-affected> (Vulnerable code not present)
@@ -72157,7 +72157,7 @@ CVE-2026-64831 (FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overfl
NOTE: Introduced with: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/82864c21112157951ce91b4430a9018edd02f5ab (n8.0)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/92737390dc133daadce47dd7d2ec8ef3d9ebcbed (master)
NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3d129a4a8531e9f7baa8558c7c994b4dd36bcf04 (n9.0)
- NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6b3015cd92d4a0f96b0511e8110c50ac0dcc9d3a (release/8.1)
+ NOTE: Fixed by: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/6b3015cd92d4a0f96b0511e8110c50ac0dcc9d3a (n8.1.3)
CVE-2026-64830 (FFmpeg versions 2.1 through 8.1.2 contains a heap buffer overflow vuln ...)
- ffmpeg 7:9.0.2-1
[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b31ccd70d6cc96d91cb97cec418beb9b89b388ba
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b31ccd70d6cc96d91cb97cec418beb9b89b388ba
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260921/5a67095e/attachment.htm>
More information about the debian-security-tracker-commits
mailing list