[Git][security-tracker-team/security-tracker][master] Add CVE-2026-46471/gst-plugins-good1.0

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
560335dc by Salvatore Bonaccorso at 2026-10-17T11:32:52+02:00
Add CVE-2026-46471/gst-plugins-good1.0

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -366,7 +366,13 @@ CVE-2026-46472 (An issue was discovered in GStreamer gst-plugins-good before 1.2
 	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/dc7ab66ab23a054eaa942071cfb548d47fe4ca2f (1.28.2)
 	NOTE: Vulnerable code introduced in > 1.25, see https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8171
 CVE-2026-46471 (An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ...)
-	TODO: check
+	- gst-plugins-good1.0 1.28.1-1
+	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0002.html
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/10880
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ce0a11b2657bbc434c570ffedd81668d44fd1277 (1.29.1)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c3b73e9173012ea15eec794280b1258e32aa5dff (1.28.1)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/f69fbb81dd8d6c20840f38612291bfbea305d53c (1.26.11)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/b3a0358b3041c4aa56ca47b3d663aa86e1d4f9bc (1.24 branch)
 CVE-2026-44977 (countly-server is the server-side part of Countly, a product analytics ...)
 	NOT-FOR-US: Countly
 CVE-2026-42270 (countly-server is the server-side part of Countly, a product analytics ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/560335dc3b99204676dc000e3248168f9e9c5850

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/560335dc3b99204676dc000e3248168f9e9c5850
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/e9b1ec83/attachment.htm>