ffmpeg DSA

5 files changed, 9 insertions, 8 deletions

diff --git a/data/CVE/list.2017 b/data/CVE/list.2017
index 5f7e4ca4fc..a7a1e4ca62 100644
--- a/data/CVE/list.2017
+++ b/data/CVE/list.2017
@@ -24440,7 +24440,7 @@ CVE-2017-9815 (In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libt
 	NOTE: The issue is addressed with the same commit as for CVE-2017-9403
 CVE-2017-9814 (cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote atta ...)
 	- cairo <unfixed> (low; bug #868580)
-	[buster] - cairo <no-dsa> (Minor issue)
+	[buster] - cairo <ignored> (Minor issue)
 	[stretch] - cairo <no-dsa> (Minor issue)
 	[jessie] - cairo <no-dsa> (Minor issue)
 	[wheezy] - cairo <no-dsa> (Minor issue)
@@ -33283,7 +33283,7 @@ CVE-2017-7476 (Gnulib before 2017-04-26 has a heap-based buffer overflow with th
 	NOTE: Introduced with 4bc76593 and 4e6e16b3f.
 CVE-2017-7475 (Cairo version 1.15.4 is vulnerable to a NULL pointer dereference relat ...)
 	- cairo <unfixed> (low; bug #870264)
-	[buster] - cairo <no-dsa> (Minor issue)
+	[buster] - cairo <ignored> (Minor issue)
 	[stretch] - cairo <no-dsa> (Minor issue)
 	[jessie] - cairo <no-dsa> (Minor issue)
 	[wheezy] - cairo <no-dsa> (Minor issue)
diff --git a/data/CVE/list.2018 b/data/CVE/list.2018
index f82c719467..b73ab0b6d0 100644
--- a/data/CVE/list.2018
+++ b/data/CVE/list.2018
@@ -8802,7 +8802,7 @@ CVE-2018-18065 (_set_key in agent/helpers/table_container.c in Net-SNMP before 5
 	NOTE: https://sourceforge.net/p/net-snmp/code/ci/7ffb8e25a0db851953155de91f0170e9bf8c457d/
 CVE-2018-18064 (cairo through 1.15.14 has an out-of-bounds stack-memory write during p ...)
 	- cairo <unfixed> (low; bug #916083)
-	[buster] - cairo <no-dsa> (Minor issue)
+	[buster] - cairo <ignored> (Minor issue)
 	[stretch] - cairo <no-dsa> (Minor issue)
 	[jessie] - cairo <no-dsa> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/341
diff --git a/data/CVE/list.2019 b/data/CVE/list.2019
index 99e8cf59dd..5ea99c9151 100644
--- a/data/CVE/list.2019
+++ b/data/CVE/list.2019
@@ -301,7 +301,7 @@ CVE-2019-20788 (libvncclient/cursor.c in LibVNCServer through 0.9.12 has a Handl
 	[stretch] - libvncserver <no-dsa> (Minor issue)
 	NOTE: https://github.com/LibVNC/libvncserver/commit/54220248886b5001fbbb9fa73c4e1a2cb9413fed
 CVE-2019-20787 (Teeworlds before 0.7.4 has an integer overflow when computing a tilema ...)
-	NOTE: Duplicate of CVE-2019-10877, requested rejection
+	NOTE: Duplicate of CVE-2019-10877
 CVE-2019-20786 (handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a chec ...)
 	NOT-FOR-US: Pion DTLS
 CVE-2019-20785 (An issue was discovered on LG mobile devices with Android OS 8.0 and 8 ...)
@@ -38679,13 +38679,13 @@ CVE-2019-6463
 	RESERVED
 CVE-2019-6462 (An issue was discovered in cairo 1.16.0. There is an infinite loop in  ...)
 	- cairo <unfixed> (low; bug #929945)
-	[buster] - cairo <no-dsa> (Minor issue)
+	[buster] - cairo <ignored> (Minor issue)
 	[stretch] - cairo <no-dsa> (Minor issue)
 	[jessie] - cairo <no-dsa> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/353
 CVE-2019-6461 (An issue was discovered in cairo 1.16.0. There is an assertion problem ...)
 	- cairo <unfixed> (low; bug #929944)
-	[buster] - cairo <no-dsa> (Minor issue)
+	[buster] - cairo <ignored> (Minor issue)
 	[stretch] - cairo <no-dsa> (Minor issue)
 	[jessie] - cairo <no-dsa> (Minor issue)
 	NOTE: https://gitlab.freedesktop.org/cairo/cairo/issues/352
diff --git a/data/DSA/list b/data/DSA/list
index bf841c8a40..e4442e9340 100644
--- a/data/DSA/list
+++ b/data/DSA/list
@@ -1,3 +1,6 @@
+[08 Jul 2020] DSA-4722-1 ffmpeg - security update
+	{CVE-2019-13390 CVE-2019-17539 CVE-2019-17542 CVE-2020-12284 CVE-2020-13904}
+	[buster] - ffmpeg 7:4.1.6-1~deb10u1
 [08 Jul 2020] DSA-4721-1 ruby2.5 - security update
 	{CVE-2020-10663 CVE-2020-10933}
 	[buster] - ruby2.5 2.5.5-3+deb10u2
diff --git a/data/dsa-needed.txt b/data/dsa-needed.txt
index 030c572db7..06dc566176 100644
--- a/data/dsa-needed.txt
+++ b/data/dsa-needed.txt
@@ -14,8 +14,6 @@ If needed, specify the release by adding a slash after the name of the source pa
 --
 curl (ghedo)
 --
-ffmpeg (jmm)
---
 fwupd
 --
 libopenmpt