[Git][security-tracker-team/security-tracker][master] Update status for CVE-2026-12893

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
41e9e050 by Salvatore Bonaccorso at 2026-07-07T07:18:24+02:00
Update status for CVE-2026-12893

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -882,12 +882,16 @@ CVE-2025-71343 (picklescan before 0.0.30 fails to detect malicious pickle files
 CVE-2025-71342 (picklescan before 0.0.30 fails to detect malicious pickle files using  ...)
 	NOT-FOR-US: picklescan
 CVE-2026-12893 [gstreamer1-libav: gstreamer1-libav: NULL pointer dereference in gstavdemux.c error handler]
-	- gst-libav1.0 <undetermined>
-	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2491322 (not yet public)
-	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer-security/-/merge_requests/78
-	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11802
+	- gst-libav1.0 1.28.4-1
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0038.html
-	TODO: check, from Red Hat only association with GStreamer gst-libav plugin is known
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11802
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f904dfda677a0c148de8c391f3dbb11490c7e026 (1.29.2)
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11823 (1.28 backport)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ea6e333c53e5fbae113804e03cbd6a53c4da5c3f (1.28.4)
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11828 (1.26 backport)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/2db03e541d9e3bb4cd8d02ce519d5c8e091dd8e3 (1.26 branch)
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11824 (1.24 backport)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f9a43351c18cef873e4d2d062d0d388ce0cf21a7 (1.24 branch)
 CVE-2024-0234
 	NOT-FOR-US: Podman Desktop
 CVE-2026-58207



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41e9e0500b0bc423733323ef8fdacb514337e424

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/41e9e0500b0bc423733323ef8fdacb514337e424
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260707/e203c060/attachment.htm>