Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d73c7f7c by Salvatore Bonaccorso at 2026-08-07T11:11:15+02:00
Add new ffmpeg issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -89,15 +89,35 @@ CVE-2026-70634 (TimescaleDB through 2.29.1, fixed in commit
517c13e, contains an
CVE-2026-70633 (TimescaleDB through 2.29.1, fixed in commit 517c13e, contains
an out-o ...)
NOT-FOR-US: Timescale TimescaleDB
CVE-2026-70632 (FFmpeg versions from 4.4 up to, but not including, 9.0 contain
an out- ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23898
+ NOTE: Introduced with:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/1006a2151236f9235bf02822f263b3fb0532111e
(n4.4)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/16b2049d4d5222db6cd7c031409058571c94f6a9
(n9.0)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/db05df9d135fb56a4babb836d5e9f5c1d984e087
(master)
CVE-2026-70631 (FFmpeg versions from 0.5 up to, but not including, 9.0 contain
an unin ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23899
+ NOTE: Introduced with:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a991b1fecbd8c9e6f4fc31c191bd12e4be27dbf7
((v0.5)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/2f234ea34c81288e3840fca632dd16481d8de39f
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/3c287af3affe1286350faa69c02bcc5d49de18bb
(n9.0)
CVE-2026-70630 (FFmpeg versions from 3.0 up to, but not including, 9.0 contain
an unin ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23896
+ NOTE: Introduced with:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/9a3202a98b2e095b54dd784c3e01a09a676fc3fa
(n3.0)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/705890061467ad550ecc1dad5eea07f28ccfb43e
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c22667d0fd7916a33fd3e79685b7246fc48f1a62
(n9.0)
CVE-2026-70629 (FFmpeg versions from 3.0 up to, but not including, 9.0 contain
an unin ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23895
+ NOTE: Introduced with:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/533a6198505edd1379e1cd722852350ae4a85acc
(n3.0)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cd1f545cf27ba08f6f5b31b1e92665d7874d4fd7
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/a5fe21a1a410a680fe93c33b0dd696b7e1c3aea4
(n9.0)
CVE-2026-70628 (FFmpeg versions from 0.5 up to, but not including, 9.0 contain
a signe ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/23897
+ NOTE: Introduced with:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/c6ec28b18cd1eb7d39e6163137367f2d1c62aa7c
(v0.5)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/93f2a525ec6c7b467bae68322720d10188fc6e30
(master)
+ NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/02fc47e13f903768b75f7985a2706a6223ab4506
(n9.0)
CVE-2026-70559 (Dinky's SysConfigController.getAll() handler for GET
/api/sysConfig/ge ...)
NOT-FOR-US: dinky
CVE-2026-70558 (Dinky's POST /download/uploadFromRsByLocal handler passes the
caller-s ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d73c7f7c18a406a1dd7190ef8da1e5c90084608f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d73c7f7c18a406a1dd7190ef8da1e5c90084608f
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
