[Git][security-tracker-team/security-tracker][master] new libde265 issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
997ced87 by Moritz Muehlenhoff at 2026-09-03T20:44:06+02:00
new libde265 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2026-XXXX [Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') and Use After Free and Double Free in libde265]
+	- libde265 1.1.2-1
+	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-xp3h-6f5r-8cxp
+CVE-2026-XXXX [heap-use-after-free in decoder_context::reset() via dangling previous_slice_header]
+	- libde265 1.1.2-1
+	NOTE: https://github.com/strukturag/libde265/security/advisories/GHSA-mm7m-v26f-wf8x
 CVE-2026-56855
 	- golang-go.crypto 1:0.56.0-1
 	NOTE: https://github.com/golang/go/issues/81317



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/997ced872e5bb5bb169cd96fbf09be0e0171aa73

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/997ced872e5bb5bb169cd96fbf09be0e0171aa73
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260903/36b4adc8/attachment-0001.htm>