[Git][security-tracker-team/security-tracker][master] Update temporary description for two libde265 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0604e26a by Salvatore Bonaccorso at 2026-10-06T08:54:49+02:00
Update temporary description for two libde265 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -43104,18 +43104,18 @@ CVE-2026-XXXX [GHSA-vm5w-mrw5-q329: Heap memory disclosure via incorrect luma pl
 	- libde265 1.1.3-1
 	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-vm5w-mrw5-q329
 	NOTE: Fixed by: https://github.com/strukturag/libde265/commit/dd8d9ca065d86736f4c8460812f9cd0171415995 (v1.1.3)
-CVE-2026-XXXX [Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') and Use After Free and Double Free in libde265]
+CVE-2026-XXXX [GHSA-xp3h-6f5r-8cxp: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') and Use After Free and Double Free in libde265]
 	- libde265 1.1.2-1
 	[trixie] - libde265 <no-dsa> (Minor issue)
 	[bookworm] - libde265 1.0.11-1+deb12u3
 	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-xp3h-6f5r-8cxp
-	NOTE: https://github.com/strukturag/libde265/commit/eb346780796055d9f9aac62d725d3170aa60c7b4 (v1.1.2)
-CVE-2026-XXXX [heap-use-after-free in decoder_context::reset() via dangling previous_slice_header]
+	NOTE: Fixed by: https://github.com/strukturag/libde265/commit/eb346780796055d9f9aac62d725d3170aa60c7b4 (v1.1.2)
+CVE-2026-XXXX [GHSA-mm7m-v26f-wf8x: heap-use-after-free in decoder_context::reset() via dangling previous_slice_header]
 	- libde265 1.1.2-1
 	[trixie] - libde265 <no-dsa> (Minor issue)
 	[bookworm] - libde265 1.0.11-1+deb12u3
 	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-mm7m-v26f-wf8x
-	NOTE: https://github.com/strukturag/libde265/commit/07bc500d45f781a7e2915afb7eebc2d6d9a541c9 (v1.1.2)
+	NOTE: Fixed by: https://github.com/strukturag/libde265/commit/07bc500d45f781a7e2915afb7eebc2d6d9a541c9 (v1.1.2)
 CVE-2026-56855 (Previously, after a channel has been established, a malicious peer cou ...)
 	- golang-go.crypto 1:0.56.0-1
 	[trixie] - golang-go.crypto <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0604e26a422e59eace9beae0f8b0e7887bbae661

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0604e26a422e59eace9beae0f8b0e7887bbae661
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261006/49157c6d/attachment-0001.htm>