[Git][security-tracker-team/security-tracker][master] 3 commits: CVE-2026-46471/gst-plugins-good1.0: postpone for bookworm

[Carlos Henrique Lima Melara (@charles)]

Carlos Henrique Lima Melara pushed to branch master at Debian Security Tracker / security-tracker


Commits:
727567c9 by Carlos Henrique Lima Melara at 2026-10-19T00:26:37-03:00
CVE-2026-46471/gst-plugins-good1.0: postpone for bookworm

To be fixed in the next round of updates.

- - - - -
b03681e0 by Carlos Henrique Lima Melara at 2026-10-19T00:26:37-03:00
LTS: add nginx to dla-needed.txt

- - - - -
1bd34604 by Carlos Henrique Lima Melara at 2026-10-19T00:26:38-03:00
LTS: add cifs-utils to dla-needed.txt

- - - - -


2 changed files:

- data/CVE/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -2720,6 +2720,7 @@ CVE-2026-46472 (An issue was discovered in GStreamer gst-plugins-good before 1.2
 	NOTE: Vulnerable code introduced in > 1.25, see https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8171
 CVE-2026-46471 (An issue was discovered in GStreamer gst-plugins-good before 1.28.2. W ...)
 	- gst-plugins-good1.0 1.28.1-1
+	[bookworm] - gst-plugins-good1.0 <postponed> (To be fixed in the next update)
 	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0002.html
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/10880
 	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/ce0a11b2657bbc434c570ffedd81668d44fd1277 (1.29.1)


=====================================
data/dla-needed.txt
=====================================
@@ -110,6 +110,10 @@ ceph
 chromium (Emilio)
   NOTE: 20261004: Added by Front-Desk (utkarsh)
 --
+cifs-utils
+  NOTE: 20261019: Added by Front-Desk (charles)
+  NOTE: 20261019: Follow DSA-6567-1 (charles)
+--
 cjose
   NOTE: 20260912: Added by Front-Desk (eamanu)
   NOTE: 20260914: Ivo Marino sent patches to the debian-lts list (santiago)
@@ -483,6 +487,10 @@ network-manager-sstp
 network-manager-vpnc
   NOTE: 20260922: Added by Front-Desk (ta)
 --
+nginx
+  NOTE: 20261018: Added by Front-Desk (charles)
+  NOTE: 20261018: In dsa-needed, sync with secteam and maintainer or follow DSA (charles)
+--
 node-dompurify
   NOTE: 20260715: Added by Front-Desk (Beuc)
   NOTE: 20260715: Upcoming DSA (Beuc/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/591fc2ade7413b81475163069cd714b445a5190d...1bd346046b9329ea9661e23eb35aebcaabc68cd1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/compare/591fc2ade7413b81475163069cd714b445a5190d...1bd346046b9329ea9661e23eb35aebcaabc68cd1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261019/7a9648e9/attachment-0001.htm>