[Git][security-tracker-team/security-tracker][master] Reached out to VLC, these are legit and will be fixed in 3.0.24

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1ff126b4 by Moritz Muehlenhoff at 2026-09-13T20:22:56+02:00
Reached out to VLC, these are legit and will be fixed in 3.0.24

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3771,7 +3771,6 @@ CVE-2026-73334 (Potential problem for users of theorg.apache.parquet.crypto.keyt
 	TODO: check
 CVE-2026-73324 (VLC media player copies an RTSP response line into a fixed buffer with ...)
 	- vlc <unfixed>
-	TODO: check upstream status
 CVE-2026-70425 (Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8. ...)
 	NOT-FOR-US: Dell / EMC
 CVE-2026-68484 (Cash Collect contains an improper authorization vulnerability in the S ...)
@@ -3792,7 +3791,6 @@ CVE-2026-57866 (Server side request forgery in Apache Impala versions 4.4.x and
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-56711 (VLC media player computes the size of a picture buffer with 32-bit ari ...)
 	- vlc <unfixed>
-	TODO: check upstream status
 CVE-2026-56207 (Signature of Bearer token is not verified in last step of SAML2 authen ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-56125



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1ff126b4fdc4aa0f3027c7ed581530c8e4b2e8c2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1ff126b4fdc4aa0f3027c7ed581530c8e4b2e8c2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260913/a7cd5575/attachment.htm>