From f5b1fa3a43c84e70d431fec33418fa72ee8e0bab Mon Sep 17 00:00:00 2001 From: Moritz Muehlenhoff Date: Wed, 8 Jul 2020 22:40:59 +0200 Subject: ffmpeg DSA --- data/CVE/list.2017 | 4 ++-- data/CVE/list.2018 | 2 +- data/CVE/list.2019 | 6 +++--- data/DSA/list | 3 +++ data/dsa-needed.txt | 2 -- 5 files changed, 9 insertions(+), 8 deletions(-) diff --git a/data/CVE/list.2017 b/data/CVE/list.2017 index 5f7e4ca4fc..a7a1e4ca62 100644 --- a/data/CVE/list.2017 +++ b/data/CVE/list.2017 @@ -24440,7 +24440,7 @@ CVE-2017-9815 (In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libt NOTE: The issue is addressed with the same commit as for CVE-2017-9403 CVE-2017-9814 (cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote atta ...) - cairo (low; bug #868580) - [buster] - cairo (Minor issue) + [buster] - cairo (Minor issue) [stretch] - cairo (Minor issue) [jessie] - cairo (Minor issue) [wheezy] - cairo (Minor issue) @@ -33283,7 +33283,7 @@ CVE-2017-7476 (Gnulib before 2017-04-26 has a heap-based buffer overflow with th NOTE: Introduced with 4bc76593 and 4e6e16b3f. CVE-2017-7475 (Cairo version 1.15.4 is vulnerable to a NULL pointer dereference relat ...) - cairo (low; bug #870264) - [buster] - cairo (Minor issue) + [buster] - cairo (Minor issue) [stretch] - cairo (Minor issue) [jessie] - cairo (Minor issue) [wheezy] - cairo (Minor issue) diff --git a/data/CVE/list.2018 b/data/CVE/list.2018 index f82c719467..b73ab0b6d0 100644 --- a/data/CVE/list.2018 +++ b/data/CVE/list.2018 @@ -8802,7 +8802,7 @@ CVE-2018-18065 (_set_key in agent/helpers/table_container.c in Net-SNMP before 5 NOTE: https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/ CVE-2018-18064 (cairo through 1.15.14 has an out-of-bounds stack-memory write during p ...) - cairo (low; bug #916083) - [buster] - cairo (Minor issue) + [buster] - cairo (Minor issue) [stretch] - cairo (Minor issue) [jessie] - cairo (Minor issue) NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/341 diff --git a/data/CVE/list.2019 b/data/CVE/list.2019 index 99e8cf59dd..5ea99c9151 100644 --- a/data/CVE/list.2019 +++ b/data/CVE/list.2019 @@ -301,7 +301,7 @@ CVE-2019-20788 (libvncclient/cursor.c in LibVNCServer through 0.9.12 has a Handl [stretch] - libvncserver (Minor issue) NOTE: https://github.com/LibVNC/libvncserver/commit/54220248886b5001fbbb9fa73c4e1a2cb9413fed CVE-2019-20787 (Teeworlds before 0.7.4 has an integer overflow when computing a tilema ...) - NOTE: Duplicate of CVE-2019-10877, requested rejection + NOTE: Duplicate of CVE-2019-10877 CVE-2019-20786 (handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a chec ...) NOT-FOR-US: Pion DTLS CVE-2019-20785 (An issue was discovered on LG mobile devices with Android OS 8.0 and 8 ...) @@ -38679,13 +38679,13 @@ CVE-2019-6463 RESERVED CVE-2019-6462 (An issue was discovered in cairo 1.16.0. There is an infinite loop in ...) - cairo (low; bug #929945) - [buster] - cairo (Minor issue) + [buster] - cairo (Minor issue) [stretch] - cairo (Minor issue) [jessie] - cairo (Minor issue) NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/353 CVE-2019-6461 (An issue was discovered in cairo 1.16.0. There is an assertion problem ...) - cairo (low; bug #929944) - [buster] - cairo (Minor issue) + [buster] - cairo (Minor issue) [stretch] - cairo (Minor issue) [jessie] - cairo (Minor issue) NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/352 diff --git a/data/DSA/list b/data/DSA/list index bf841c8a40..e4442e9340 100644 --- a/data/DSA/list +++ b/data/DSA/list @@ -1,3 +1,6 @@ +[08 Jul 2020] DSA-4722-1 ffmpeg - security update + {CVE-2019-13390 CVE-2019-17539 CVE-2019-17542 CVE-2020-12284 CVE-2020-13904} + [buster] - ffmpeg 7:4.1.6-1~deb10u1 [08 Jul 2020] DSA-4721-1 ruby2.5 - security update {CVE-2020-10663 CVE-2020-10933} [buster] - ruby2.5 2.5.5-3+deb10u2 diff --git a/data/dsa-needed.txt b/data/dsa-needed.txt index 030c572db7..06dc566176 100644 --- a/data/dsa-needed.txt +++ b/data/dsa-needed.txt @@ -14,8 +14,6 @@ If needed, specify the release by adding a slash after the name of the source pa -- curl (ghedo) -- -ffmpeg (jmm) --- fwupd -- libopenmpt -- cgit v1.2.3