Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
55a47830 by Salvatore Bonaccorso at 2026-07-04T09:15:01+02:00
Add CVE-2026-12893/gst-libav1.0
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -222,6 +222,11 @@ CVE-2025-71343 (picklescan before 0.0.30 fails to detect
malicious pickle files
TODO: check
CVE-2025-71342 (picklescan before 0.0.30 fails to detect malicious pickle
files using ...)
TODO: check
+CVE-2026-12893 [gstreamer1-libav: gstreamer1-libav: NULL pointer dereference
in gstavdemux.c error handler]
+ - gst-libav1.0 <undetermined>
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2491322 (not yet
public)
+ NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/78
+ TODO: check, from Red Hat only association with GStreamer gst-libav
plugin is known
CVE-2024-0234
NOT-FOR-US: Podman Desktop
CVE-2026-58207
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/55a47830f2c9d0247e31e19dcd4e9bf2b0d636e3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/55a47830f2c9d0247e31e19dcd4e9bf2b0d636e3
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
