[Git][security-tracker-team/security-tracker][master] Add new libde265 issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f48e2b4f by Salvatore Bonaccorso at 2026-10-06T08:53:41+02:00
Add new libde265 issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43100,6 +43100,10 @@ CVE-2026-15431 (A potential security vulnerability has been identified in the HP
 	NOT-FOR-US: HP
 CVE-2025-12737 (The administrative operations within the Carbon Console do not adequat ...)
 	NOT-FOR-US: WSO2
+CVE-2026-XXXX [GHSA-vm5w-mrw5-q329: Heap memory disclosure via incorrect luma plane fill in de265_image::fill_plane()]
+	- libde265 1.1.3-1
+	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-vm5w-mrw5-q329
+	NOTE: Fixed by: https://github.com/strukturag/libde265/commit/dd8d9ca065d86736f4c8460812f9cd0171415995 (v1.1.3)
 CVE-2026-XXXX [Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') and Use After Free and Double Free in libde265]
 	- libde265 1.1.2-1
 	[trixie] - libde265 <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f48e2b4f4c7e2edc6829d06a2c3e67f57979b7b0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f48e2b4f4c7e2edc6829d06a2c3e67f57979b7b0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/5baeeb9d/attachment.htm>