[Git][security-tracker-team/security-tracker][master] Add some new gpac issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
d48c9b09 by Salvatore Bonaccorso at 2021-09-15T07:40:53+02:00
Add some new gpac issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -17710,19 +17710,25 @@ CVE-2021-33366 (Memory leak in the 
gf_isom_oinf_read_entry function in MP4Box in
        NOTE: 
https://github.com/gpac/gpac/commit/0a85029d694f992f3631e2f249e4999daee15cbf
        NOTE: https://github.com/gpac/gpac/issues/1785
 CVE-2021-33365 (Memory leak in the gf_isom_get_root_od function in MP4Box in 
GPAC 1.0. ...)
-       TODO: check
+       - gpac <unfixed>
+       NOTE: 
https://github.com/gpac/gpac/commit/984787de3d414a5f7d43d0b4584d9469dff2a5a5
+       NOTE: https://github.com/gpac/gpac/issues/1784
 CVE-2021-33364 (Memory leak in the def_parent_box_new function in MP4Box in 
GPAC 1.0.1 ...)
        - gpac <unfixed>
        NOTE: 
https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7
        NOTE: https://github.com/gpac/gpac/issues/1783
 CVE-2021-33363 (Memory leak in the infe_box_read function in MP4Box in GPAC 
1.0.1 allo ...)
-       TODO: check
+       - gpac <unfixed>
+       NOTE: 
https://github.com/gpac/gpac/commit/ec64c7b8966d7e4642d12debb888be5acf18efb9
+       NOTE: https://github.com/gpac/gpac/issues/1786
 CVE-2021-33362 (Stack buffer overflow in the hevc_parse_vps_extension function 
in MP4B ...)
        - gpac <unfixed>
        NOTE: 
https://github.com/gpac/gpac/commit/1273cdc706eeedf8346d4b9faa5b33435056061d
        NOTE: https://github.com/gpac/gpac/issues/1780
 CVE-2021-33361 (Memory leak in the afra_box_read function in MP4Box in GPAC 
1.0.1 allo ...)
-       TODO: check
+       - gpac <unfixed>
+       NOTE: 
https://github.com/gpac/gpac/commit/a51f951b878c2b73c1d8e2f1518c7cdc5fb82c3f
+       NOTE: https://github.com/gpac/gpac/issues/1782
 CVE-2021-33360
        RESERVED
 CVE-2021-33359 (A vulnerability exists in gowitness &lt; 2.3.6 that allows an 
unauthen ...)
@@ -20657,9 +20663,13 @@ CVE-2021-32141
 CVE-2021-32140
        RESERVED
 CVE-2021-32139 (The gf_isom_vp_config_get function in GPAC 1.0.1 allows 
attackers to c ...)
-       TODO: check
+       - gpac <unfixed>
+       NOTE: 
https://github.com/gpac/gpac/commit/d527325a9b72218612455a534a508f9e1753f76e
+       NOTE: https://github.com/gpac/gpac/issues/1768
 CVE-2021-32138 (The DumpTrackInfo function in GPAC 1.0.1 allows attackers to 
cause a d ...)
-       TODO: check
+       - gpac <unfixed>
+       NOTE: 
https://github.com/gpac/gpac/commit/289ffce3e0d224d314f5f92a744d5fe35999f20b
+       NOTE: https://github.com/gpac/gpac/issues/1767
 CVE-2021-32137 (Heap buffer overflow in the URL_GetProtocolType function in 
MP4Box in  ...)
        - gpac <unfixed>
        NOTE: 
https://github.com/gpac/gpac/commit/328def7d3b93847d64ecb6e9e0399684e57c3eca



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d48c9b09fe377b6d42a9b87735b6ab9a35cfbf4c

-- 
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d48c9b09fe377b6d42a9b87735b6ab9a35cfbf4c
You're receiving this email because of your account on salsa.debian.org.



_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits