[Git][security-tracker-team/security-tracker][master] Update status for GHSA-vm5w-mrw5-q329/libde265 for trixie

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
9fd5891d by Salvatore Bonaccorso at 2026-10-10T14:43:57+02:00
Update status for GHSA-vm5w-mrw5-q329/libde265 for trixie

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -49071,10 +49071,11 @@ CVE-2025-12737 (The administrative operations within the Carbon Console do not a
 	NOT-FOR-US: WSO2
 CVE-2026-XXXX [GHSA-vm5w-mrw5-q329: Heap memory disclosure via incorrect luma plane fill in de265_image::fill_plane()]
 	- libde265 1.1.3-1
+	[trixie] - libde265 <not-affected> (Vulnerable code not present)
 	[bookworm] - libde265 <not-affected> (vulnerable code introduced later)
 	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-vm5w-mrw5-q329
+	NOTE: Introduced with: https://github.com/strukturag/libde265/commit/c7855dd9a0407f4b2c33661b99bf5a802fb7522d (v1.0.16)
 	NOTE: Fixed by: https://github.com/strukturag/libde265/commit/dd8d9ca065d86736f4c8460812f9cd0171415995 (v1.1.3)
-	NOTE: introduced by: https://github.com/strukturag/libde265/commit/c7855dd9a0407f4b2c33661b99bf5a802fb7522d (v1.0.16)
 CVE-2026-XXXX [GHSA-xp3h-6f5r-8cxp: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') and Use After Free and Double Free in libde265]
 	- libde265 1.1.2-1
 	[trixie] - libde265 <no-dsa> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fd5891d4c99f9b46b360b0c8ef519808c0dfaff

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/9fd5891d4c99f9b46b360b0c8ef519808c0dfaff
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261010/86c7074d/attachment.htm>