Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
22d705fc by Salvatore Bonaccorso at 2025-02-24T18:53:05+01:00
Add CVE-2025-25471/ffmpeg
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -812,7 +812,9 @@ CVE-2025-25472 (A buffer overflow in DCMTK git master
v3.6.9+ DEV allows attacke
NOTE: Introduced by fix for CVE-2024-47796:
https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=89a6e399f1e17d08a8bc8cdaa05b2ac9a50cd4f6
NOTE: Fixed by:
https://git.dcmtk.org/?p=dcmtk.git;a=commit;h=410ffe2019b9db6a8f4036daac742a6f5e4d36c2
CVE-2025-25471 (FFmpeg git master before commit fd1772 was discovered to
contain a NUL ...)
- TODO: check
+ - ffmpeg <not-affected> (Vulnerable code introduced later)
+ NOTE: https://trac.ffmpeg.org/ticket/11417
+ NOTE: Fixed by:
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/fd1772b7475d0d5673a5dd314ee78443d0be4cf1
CVE-2025-25469 (FFmpeg git-master before commit d5873b was discovered to
contain a mem ...)
TODO: check
CVE-2025-25468 (FFmpeg git-master before commit d5873b was discovered to
contain a mem ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22d705fca9c184a77eec3d774927163dcc481bda
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22d705fca9c184a77eec3d774927163dcc481bda
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
