[Git][security-tracker-team/security-tracker][master] Add CVE-2026-119777/gst-plugins-bad1.0

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Oct 30 21:49:26 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f902626a by Salvatore Bonaccorso at 2026-10-30T22:48:52+01:00
Add CVE-2026-119777/gst-plugins-bad1.0

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -225,7 +225,9 @@ CVE-2026-119842 (A flaw was found in GStreamer's gst-plugins-base MicroDVD subti
 	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/12fc1ed6ff3e0e0b9063f5e43d8ff2674a3c160b (1.28.2)
 	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/4abcbf913999ec9869f302732519827cf52c4023 (1.26-branch)
 CVE-2026-119777 (A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When ...)
-	TODO: check
+	- gst-plugins-bad1.0 1.28.2-1
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11241
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/c2690afec214d86ea5c054ca689fb7ee36980c45 (1.28.2)
 CVE-2026-119764 (Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting  ...)
 	TODO: check
 CVE-2026-119763 (changelog.com before commit 7b35e829 contains a missing authorization  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f902626a4d82ae0c9fc452af8940d7d14ed87dda

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f902626a4d82ae0c9fc452af8940d7d14ed87dda
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/45a9b24c/attachment.htm>


More information about the debian-security-tracker-commits mailing list