Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
4e19bf79 by Salvatore Bonaccorso at 2023-10-28T11:44:42+02:00
Add CVE-2023-46407/ffmpeg
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -111,7 +111,12 @@ CVE-2023-46852 (In Memcached before 1.6.22, a buffer
overflow exists when proces
CVE-2023-46604 (Apache ActiveMQ is vulnerable to Remote Code Execution.The
vulnerabili ...)
TODO: check
CVE-2023-46407 (FFmpeg prior to commit bf814 was discovered to contain an out
of bound ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: Introduced by:
https://github.com/FFmpeg/FFmpeg/commit/f7ac3512f5b5cb8eb149f37300b43461d8e93af3
+ NOTE: Fixed by:
https://github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962
+ NOTE:
https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231015004924.597746-1-leo.izen%40gmail.com/
+ NOTE:
https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231013014959.536776-1-leo.izen%40gmail.com/
+ TODO: check details for released versions
CVE-2023-46394 (A stored cross-site scripting (XSS) vulnerability in
/home/user/edit_s ...)
NOT-FOR-US: gougucms
CVE-2023-46393 (gougucms v4.08.18 was discovered to contain a password reset
poisoning ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e19bf79e6b03cf034b0ff5224b34716c6bb58e7
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4e19bf79e6b03cf034b0ff5224b34716c6bb58e7
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
