Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker
Commits: 9ed79f37 by Moritz Muehlenhoff at 2019-04-08T18:50:08Z ffmpeg, podofo bugs - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -413,7 +413,7 @@ CVE-2019-10725 CVE-2019-10724 RESERVED CVE-2019-10723 (An issue was discovered in PoDoFo 0.9.6. The PdfPagesTreeCache class i ...) - - libpodofo <unfixed> + - libpodofo <unfixed> (bug #926667) [jessie] - libpodofo <ignored> (DoS, not used by any sponsor) NOTE: https://sourceforge.net/p/podofo/tickets/46/ CVE-2019-1003099 (A missing permission check in Jenkins openid Plugin in the OpenIdSsoSe ...) @@ -3527,7 +3527,7 @@ CVE-2019-9723 CVE-2019-9722 RESERVED CVE-2019-9721 (A denial of service in the subtitle decoder in FFmpeg 4.1 allows attac ...) - - ffmpeg <unfixed> + - ffmpeg <unfixed> (bug #926666) [stretch] - ffmpeg <not-affected> (Vulnerable code not present) NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/894995c41e0795c7a44f81adc4838dedc3932e65 CVE-2019-9720 @@ -3535,7 +3535,7 @@ CVE-2019-9720 CVE-2019-9719 RESERVED CVE-2019-9718 (In FFmpeg 4.1, a denial of service in the subtitle decoder allows atta ...) - - ffmpeg <unfixed> (low) + - ffmpeg <unfixed> (low; bug #926666) [stretch] - ffmpeg <postponed> (Wait until fixed in 3.2.x release) NOTE: https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/1f00c97bc3475c477f3c468cf2d924d5761d0982 CVE-2019-9717 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9ed79f375e586e14a67ef57fd1a704940b4c9a82 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/9ed79f375e586e14a67ef57fd1a704940b4c9a82 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits