Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
41e9e050 by Salvatore Bonaccorso at 2026-07-07T07:18:24+02:00
Update status for CVE-2026-12893
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -882,12 +882,16 @@ CVE-2025-71343 (picklescan before 0.0.30 fails to detect
malicious pickle files
CVE-2025-71342 (picklescan before 0.0.30 fails to detect malicious pickle
files using ...)
NOT-FOR-US: picklescan
CVE-2026-12893 [gstreamer1-libav: gstreamer1-libav: NULL pointer dereference
in gstavdemux.c error handler]
- - gst-libav1.0 <undetermined>
- NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2491322 (not yet
public)
- NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/78
- NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11802
+ - gst-libav1.0 1.28.4-1
NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0038.html
- TODO: check, from Red Hat only association with GStreamer gst-libav
plugin is known
+ NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11802
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f904dfda677a0c148de8c391f3dbb11490c7e026
(1.29.2)
+ NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11823 (1.28
backport)
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ea6e333c53e5fbae113804e03cbd6a53c4da5c3f
(1.28.4)
+ NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11828 (1.26
backport)
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2db03e541d9e3bb4cd8d02ce519d5c8e091dd8e3
(1.26 branch)
+ NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11824 (1.24
backport)
+ NOTE: Fixed by:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f9a43351c18cef873e4d2d062d0d388ce0cf21a7
(1.24 branch)
CVE-2024-0234
NOT-FOR-US: Podman Desktop
CVE-2026-58207
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41e9e0500b0bc423733323ef8fdacb514337e424
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41e9e0500b0bc423733323ef8fdacb514337e424
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
