[Git][security-tracker-team/security-tracker][master] Add two more gst-plugins-bad1.0 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f5360ea1 by Salvatore Bonaccorso at 2026-10-30T23:36:33+01:00
Add two more gst-plugins-bad1.0 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -259,9 +259,17 @@ CVE-2026-119729 (A flaw was found in GStreamer. An integer overflow vulnerabilit
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11245
 	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11259 (1.28.2)
 CVE-2026-119728 (A flaw was found in the H.264 video parser in gst-plugins-bad. When pr ...)
-	TODO: check
+	- gst-plugins-bad1.0 1.28.2-1
+	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0013.html
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11240
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11251 (1.28.1)
 CVE-2026-119727 (A flaw was found in GStreamer's gst-plugins-bad H.265 video parser. Wh ...)
-	TODO: check
+	- gst-plugins-bad1.0 1.28.1-1
+	NOTE: https://gstreamer.freedesktop.org/security/sa-2026-0012.html
+	NOTE: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/10902
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/5285725634beb0085c886476c34496edbdfd9dbb (1.28.1)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/7e717afe9839b05c350b6778811eef5e4c75bb26 (1.26.11)
+	NOTE: Fixed by: https://gitlab.freedesktop.org/gstreamer/gstreamer/-/commit/0846ed1364c9b1d83e52ed09cdc3de4cdc7ec50d (1.24-branch)
 CVE-2026-119722 (Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-boun ...)
 	- blender <unfixed>
 	NOTE: https://projects.blender.org/blender/blender/pulls/164279



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5360ea1a49491c71cbb80d172bed93436f540e1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5360ea1a49491c71cbb80d172bed93436f540e1
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/07b9c0a3/attachment.htm>