Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
58663ab5 by Moritz Muehlenhoff at 2018-07-05T22:41:13+02:00
new ffmpeg issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -45,17 +45,29 @@ CVE-2018-13307
CVE-2018-13306
RESERVED
CVE-2018-13305 (In FFmpeg 4.0.1, due to a missing check for negative values of
the ...)
- TODO: check
+ - ffmpeg <unfixed>
+ - libav <undetermined>
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/d08d4a8c7387e758d439b0592782e4cfa2b4d6a4
CVE-2018-13304 (In libavcodec in FFmpeg 4.0.1, improper maintenance of the
consistency ...)
- TODO: check
+ - ffmpeg <unfixed>
+ - libav <undetermined>
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/bd27a9364ca274ca97f1df6d984e88a0700fb235
CVE-2018-13303 (In FFmpeg 4.0.1, a missing check for failure of a call to ...)
- TODO: check
+ - ffmpeg <unfixed>
+ - libav <undetermined>
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/00e8181bd97c834fe60751b0c511d4bb97875f78
CVE-2018-13302 (In FFmpeg 4.0.1, improper handling of frame types (other than
...)
- TODO: check
+ - ffmpeg <unfixed>
+ - libav <undetermined>
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/ed22dc22216f74c75ee7901f82649e1ff725ba50
CVE-2018-13301 (In FFmpeg 4.0.1, due to a missing check of a profile value
before ...)
- TODO: check
+ - ffmpeg <unfixed>
+ - libav <undetermined>
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/2aa9047486dbff12d9e040f917e5f799ed2fd78b
CVE-2018-13300 (In FFmpeg 4.0.1, an improper argument (AVCodecParameters)
passed to the ...)
- TODO: check
+ - ffmpeg <unfixed>
+ - libav <undetermined>
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/95556e27e2c1d56d9e18f5db34d6f756f3011148
CVE-2018-13299
RESERVED
CVE-2018-13298
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/58663ab5680a26d1d35d20558a0b5e04052acc38
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/58663ab5680a26d1d35d20558a0b5e04052acc38
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
