[Git][security-tracker-team/security-tracker][master] Mark bookworm not-affected by CVE-2026-{12891,52722,53701}

[Andreas Henriksson (@ah)]

Andreas Henriksson pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b380ac91 by Andreas Henriksson at 2026-10-15T18:52:48+02:00
Mark bookworm not-affected by CVE-2026-{12891,52722,53701}

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -135521,6 +135521,7 @@ CVE-2026-12892 (A flaw was found in GStreamer's gst-plugins-bad package. When pr
 CVE-2026-12891 (A flaw was found in the GStreamer gst-plugins-bad package. When proces ...)
 	{DSA-6458-1}
 	- gst-plugins-bad1.0 1.28.5-1
+	[bookworm] - <not-affected> (Vulnerable code, h266parser, not present)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2491318
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0048.html
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5109 (private)
@@ -140538,6 +140539,7 @@ CVE-2026-53430 (Improper Handling of Highly Compressed Data (Data Amplification)
 CVE-2026-52722 (A signed integer overflow vulnerability was found in GStreamer's VMnc  ...)
 	{DSA-6458-1}
 	- gst-plugins-bad1.0 1.28.5-1
+	[bookworm] - <not-affected> (Vulnerable code, wmncdec, not present)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2486733
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0046.html
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/work_items/5107 (private)
@@ -142507,6 +142509,7 @@ CVE-2026-53702 (A stack buffer overflow flaw was found in the GStreamer H.265 co
 CVE-2026-53701 (An out-of-bounds write vulnerability was found in GStreamer's H.266/VV ...)
 	{DSA-6362-1}
 	- gst-plugins-bad1.0 1.28.3-1
+	[bookworm] - <not-affected> (Vulnerable code, h266parser, not present)
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0026.html
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11581
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f66e8292edbc50c5404b0a4ec8003eb6bc008977 (main)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b380ac919c55be3baaaf95951082379f8565586e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b380ac919c55be3baaaf95951082379f8565586e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261015/88daaf26/attachment-0001.htm>