Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2a0325f4 by Salvatore Bonaccorso at 2024-01-28T10:50:23+01:00
Add three new ffmpeg issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -31,11 +31,19 @@ CVE-2024-23170 [Timing side channel in private key RSA
operations]
CVE-2024-23506 (Exposure of Sensitive Information to an Unauthorized Actor
vulnerabili ...)
NOT-FOR-US: WordPress plugin
CVE-2024-22862 (Integer overflow vulnerability in FFmpeg before n6.1, allows
remote at ...)
- TODO: check
+ - ffmpeg 7:6.1-1
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/ca09d8a0dcd82e3128e62463231296aaf63ae6f7
(n6.1)
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62113
+ TODO: check details for older versions
CVE-2024-22861 (Integer overflow vulnerability in FFmpeg before n6.1, allows
attackers ...)
- TODO: check
+ - ffmpeg 7:6.1-1
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/87b8c1081959e45ffdcbabb3d53ac9882ef2b5ce
(n6.1)
+ TODO: check details for older versions
CVE-2024-22860 (Integer overflow vulnerability in FFmpeg before n6.1, allows
remote at ...)
- TODO: check
+ - ffmpeg 7:6.1-1
+ NOTE:
https://github.com/FFmpeg/FFmpeg/commit/d2e8974699a9e35cc1a926bf74a972300d629cd5
(n6.1)
+ NOTE: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61991
+ TODO: check details for older versions
CVE-2024-22283 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
NOT-FOR-US: WordPress plugin
CVE-2024-22147 (Improper Neutralization of Special Elements used in an SQL
Command ('S ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a0325f456029441ff7437a44908ce6af6f69c2c
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2a0325f456029441ff7437a44908ce6af6f69c2c
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
