Roberto C. Sánchez pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ef1522fb by Roberto C. Sánchez at 2022-04-01T12:18:30-04:00
LTS: mark CVE-2020-35980/gpac as <not-affected> for stretch and buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -85492,13 +85492,15 @@ CVE-2020-35981 (An issue was discovered in GPAC
version 0.8.0 and 1.0.1. There i
CVE-2020-35980 (An issue was discovered in GPAC version 0.8.0 and 1.0.1. There
is a us ...)
- gpac 2.0.0+dfsg1-2 (bug #987374; bug #990691)
[bullseye] - gpac <no-dsa> (Minor issue)
- [buster] - gpac <no-dsa> (Minor issue)
- [stretch] - gpac <no-dsa> (Minor issue)
+ [buster] - gpac <not-affected> (Vulnerable code introduced later, in
version 0.8.0)
+ [stretch] - gpac <not-affected> (Vulnerable code introduced later, in
version 0.8.0)
- ccextractor 0.93+ds2-1 (bug #994746)
[bullseye] - ccextractor <not-affected> (Vulnerable code introduced
later)
[buster] - ccextractor <not-affected> (Vulnerable code introduced later)
NOTE:
https://github.com/gpac/gpac/commit/5aba27604d957e960d8069d85ccaf868f8a7b07a
(v2.0.0)
NOTE: https://github.com/gpac/gpac/issues/1661
+ NOTE: Introduced by
https://github.com/gpac/gpac/commit/51dadae6c790af3f639c4d9d660658b2848b51a0
+ NOTE: The vulnerability refers to the stbl member of the TrackWriter
struct in isom_writer.c, which was only introduced in 51dadae6c7
CVE-2020-35979 (An issue was discovered in GPAC version 0.8.0 and 1.0.1. There
is heap ...)
- gpac 1.0.1+dfsg1-4 (bug #987374)
[buster] - gpac <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef1522fbc0880f055d9274fda46b1efb5cd0421a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ef1522fbc0880f055d9274fda46b1efb5cd0421a
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
