Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
245f7046 by Salvatore Bonaccorso at 2026-10-09T12:28:45+02:00
Add more ffmpeg issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -515,21 +515,40 @@ CVE-2026-107698 (FFmpeg before 7.1.4 and 8.0.x before
8.0.2 contains a server-si
NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/7c011995e394e04f685d6674727dd490cfb297ba
(n7.1.4)
NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/b05562b9b399057b6537fae337d0eeabcff6ef5c
(n5.1.9)
CVE-2026-107697 (FFmpeg before 8.1.3 contains a protection mechanism failure
in the HLS ...)
- TODO: check
+ - ffmpeg 7:9.0.2-1
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/23602df9cd1b485c45ba6f533d3b85569de3f323
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/01044d04536eec6e2f5f48ef404cf45d15feb461
(n9.0)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/191715f0232cee64402c3e7733f28ff4061224b6
(n8.1.3)
CVE-2026-107696 (FFmpeg through 9.0.2 contains an infinite loop vulnerability
in ff_rts ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24902
CVE-2026-107695 (FFmpeg before 8.1.3 contains an infinite loop vulnerability
in the HLS ...)
- TODO: check
+ - ffmpeg 7:9.0.2-1
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c364ab176f722bdabc886845e770c9eacbc1e3e5
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0e6eef35517af086419c5157980e926a81070c2a
(n9.0)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a4ddaba8bb7811b1a3afaad59fe6555e720d4754
(n8.1.3)
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23618
CVE-2026-107678 (FFmpeg through 9.0.2 contains a stack exhaustion
vulnerability in av_e ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24593
CVE-2026-107677 (FFmpeg through 9.0.2 contains a denial of service
vulnerability in the ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24592
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/ed27bfcbbbc0872c0195eaf4dd2c0c93b9f1778e
(master)
CVE-2026-107676 (FFmpeg through 9.0.2 contains an uninitialized memory
disclosure vulne ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24590
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2c2f6e96e31795ae95a8f8323a493ffbc493111f
(master)
CVE-2026-107675 (FFmpeg through 9.0.2 contains a missing host key verification
vulnerab ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24384
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2b822b7fb6ed195546bc9fd9bdb794e98222bdce
(master)
CVE-2026-107660 (FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper
certific ...)
- TODO: check
+ - ffmpeg 7:9.0.2-1
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24383
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/57a2e704b4a6eda5d061b45aacde6b19c026bfc0
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/d377212904a19fc740d721cbda0ba58fa3805a29
(n9.0.2)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f
(n8.1.3)
CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer
overflow e ...)
- eog <unfixed>
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/245f7046049f42d7ecd924062f67a0ad9ecdd087
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/245f7046049f42d7ecd924062f67a0ad9ecdd087
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
