Sylvain Beucler pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
120dff38 by Sylvain Beucler at 2026-07-17T22:42:52+02:00
CVE-2026-53703,CVE-2026-53704/gst-plugins-ugly1.0: bookworm,bullseye postponed
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -24151,6 +24151,8 @@ CVE-2026-56968 (GNU SASL before 2.2.4 lacks
sanitization of a short challenge in
CVE-2026-53704 (A flaw was found in GStreamer's RealMedia demuxer in the
gst-plugins-u ...)
- gst-plugins-ugly1.0 1.28.4-1
[trixie] - gst-plugins-ugly1.0 <no-dsa> (Minor issue)
+ [bookworm] - gst-plugins-ugly1.0 <postponed> (Minor issue, DoS)
+ [bullseye] - gst-plugins-ugly1.0 <postponed> (Minor issue, DoS)
NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0042.html
NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11825
NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11826
(1.28.4)
@@ -24159,6 +24161,8 @@ CVE-2026-53704 (A flaw was found in GStreamer's
RealMedia demuxer in the gst-plu
CVE-2026-53703 (A vulnerability was found in the GStreamer RealMedia demuxer
(gst-plug ...)
- gst-plugins-ugly1.0 1.28.4-1
[trixie] - gst-plugins-ugly1.0 <no-dsa> (Minor issue)
+ [bookworm] - gst-plugins-ugly1.0 <postponed> (Minor issue, OOB read)
+ [bullseye] - gst-plugins-ugly1.0 <postponed> (Minor issue, OOB read)
NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0042.html
NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11825
NOTE:
https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11826
(1.28.4)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/120dff3863a4a2cf2731f79f7cb1d66b56c3de36
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/120dff3863a4a2cf2731f79f7cb1d66b56c3de36
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
