[Git][security-tracker-team/security-tracker][master] 3 commits: lts: gst-plugins-good1.0 issues postponed

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5a7fa00c by Emilio Pozuelo Monfort at 2026-11-02T11:47:38+01:00
lts: gst-plugins-good1.0 issues postponed

- - - - -
50718886 by Emilio Pozuelo Monfort at 2026-11-02T11:47:39+01:00
lts: add chromium

- - - - -
085fb5dd by Emilio Pozuelo Monfort at 2026-11-02T11:47:40+01:00
lts: gcc-11 no-dsa

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1773,6 +1773,7 @@ CVE-2026-115455 (A flaw was found in GCC libstdc++. When an application extracts
 	- gcc-12 <unfixed> (bug #1152815)
 	[trixie] - gcc-12 <no-dsa> (Minor issue)
 	- gcc-11 <unfixed> (bug #1152814)
+	[bookworm] - gcc-11 <no-dsa> (Minor issue)
 	NOTE: https://gcc.gnu.org/cgit/gcc/commit/?id=5d419c69ce2e6b86d7da75f18736904885674219
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2562933
 CVE-2026-115346 (The Avada | Website Builder For WordPress & WooCommerce theme for Word ...)
@@ -1791,6 +1792,7 @@ CVE-2026-114691 (A flaw was found in the libstdc++ component of GCC. An attacker
 	- gcc-12 <unfixed> (bug #1152815)
 	[trixie] - gcc-12 <no-dsa> (Minor issue)
 	- gcc-11 <unfixed> (bug #1152814)
+	[bookworm] - gcc-11 <no-dsa> (Minor issue)
 	NOTE: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=2fd8866591b5aea7098835f80ab7e176382175ae
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478508
 CVE-2026-114690 (A flaw was found in GCC. An out-of-bounds memory access vulnerability  ...)
@@ -1803,6 +1805,7 @@ CVE-2026-114690 (A flaw was found in GCC. An out-of-bounds memory access vulnera
 	- gcc-12 <unfixed> (bug #1152815)
 	[trixie] - gcc-12 <no-dsa> (Minor issue)
 	- gcc-11 <unfixed> (bug #1152814)
+	[bookworm] - gcc-11 <no-dsa> (Minor issue)
 	NOTE: https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=c1f32b67510f6f9998deadaef5090b6663adb979 (main)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2478652
 CVE-2026-112905 (Vvveb is a powerful and easy to use CMS with page builder to build web ...)
@@ -189261,6 +189264,7 @@ CVE-2026-4029 (The Database Backup for WordPress plugin for WordPress is vulnera
 CVE-2026-46470 (An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ...)
 	{DSA-6318-1}
 	- gst-plugins-good1.0 1.28.2-1
+	[bookworm] - gst-plugins-good1.0 <postponed> (Minor issue)
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0018.html
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243
 	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/dbd4cb49e72836d2372de2d2043d28c7a7fce9c4 (1.28.2)
@@ -189270,6 +189274,7 @@ CVE-2026-46470 (An issue was discovered in GStreamer gst-plugins-good before 1.2
 CVE-2026-46469 (An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ...)
 	{DSA-6318-1}
 	- gst-plugins-good1.0 1.28.2-1
+	[bookworm] - gst-plugins-good1.0 <postponed> (Minor issue)
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0018.html
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243
 	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/dbd4cb49e72836d2372de2d2043d28c7a7fce9c4 (1.28.2)


=====================================
data/dla-needed.txt
=====================================
@@ -105,6 +105,9 @@ cairosvg
 ceph
   NOTE: 20261005: Added by Front-Desk. Follow DSA or propose a DSA (rouca)
 --
+chromium (Emilio)
+  NOTE: 20261102: Added by Front-Desk (pochu)
+--
 cifs-utils
   NOTE: 20261019: Added by Front-Desk (charles)
   NOTE: 20261019: Follow DSA-6567-1 (charles)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9934045bdbc05cef3d7f5a575d36259327672e41...085fb5dd5d380d78f9ef4f8e6128ea4caa7cefab

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/9934045bdbc05cef3d7f5a575d36259327672e41...085fb5dd5d380d78f9ef4f8e6128ea4caa7cefab
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/c7100c88/attachment-0001.htm>