[Git][security-tracker-team/security-tracker][master] Add CVE-2026-46472/gst-plugins-good1.0

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
625cfa5b by Salvatore Bonaccorso at 2026-10-17T11:26:07+02:00
Add CVE-2026-46472/gst-plugins-good1.0

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -356,7 +356,15 @@ CVE-2026-48741 (libIEC61850 is an open-source implementation of IEC 61850 client
 CVE-2026-48503 (libIEC61850 is an open-source implementation of IEC 61850 client and s ...)
 	NOT-FOR-US: libIEC61850
 CVE-2026-46472 (An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ...)
-	TODO: check
+	- gst-plugins-good1.0 1.28.2-1
+	[bookworm] - gst-plugins-good1.0 <not-affected> (Vulnerable code introduced later)
+	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0018.html
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/dbd4cb49e72836d2372de2d2043d28c7a7fce9c4 (1.28.2)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/10fd1abfdb793641b4eb0454478e01fd74648d5c (1.28.2)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/34418818730bc04e41f512e65331b3f206cb5eb9 (1.28.2)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/dc7ab66ab23a054eaa942071cfb548d47fe4ca2f (1.28.2)
+	NOTE: Vulnerable code introduced in > 1.25, see https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8171
 CVE-2026-46471 (An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ...)
 	TODO: check
 CVE-2026-44977 (countly-server is the server-side part of Countly, a product analytics ...)


=====================================
data/DSA/list
=====================================
@@ -760,7 +760,7 @@
 	[bookworm] - yelp 42.2-1+deb12u2
 	[trixie] - yelp 42.2-4+deb13u1
 [01 Jun 2026] DSA-6318-1 gst-plugins-good1.0 - security update
-	{CVE-2026-5056 CVE-2026-46469 CVE-2026-46470}
+	{CVE-2026-5056 CVE-2026-46469 CVE-2026-46470 CVE-2026-46472}
 	[trixie] - gst-plugins-good1.0 1.26.2-1+deb13u1
 [01 Jun 2026] DSA-6317-1 symfony - security update
 	{CVE-2024-50340 CVE-2026-45063 CVE-2026-45065 CVE-2026-45067 CVE-2026-45068 CVE-2026-45071 CVE-2026-45073 CVE-2026-45077 CVE-2026-45133 CVE-2026-45304 CVE-2026-45305 CVE-2026-46626 CVE-2026-48489 CVE-2026-48736 CVE-2026-45070 CVE-2026-48784}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/625cfa5b0965dfe6b36de4aa6ca3e3fcd6f47b69

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/625cfa5b0965dfe6b36de4aa6ca3e3fcd6f47b69
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/4d19f603/attachment.htm>