[Git][security-tracker-team/security-tracker][master] mark CVE-2026-13858 as fixed

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
c5ad5055 by Moritz Muehlenhoff at 2026-09-20T22:42:10+02:00
mark CVE-2026-13858 as fixed

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -91588,6 +91588,10 @@ CVE-2026-13858 (Out of bounds read in FFmpeg in Google Chrome prior to 150.0.787
 	[bullseye] - chromium <end-of-life> (see #1061268)
 	- ffmpeg <unfixed>
 	[trixie] - ffmpeg <postponed> (Wait until fixed in 7.1.x upstream branch)
+	NOTE: https://issues.chromium.org/issues/507090179
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/22976
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/256d93413f260e1524c2ab994dc72c4edaa0d04c (n9.0)
+	NOTE: https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/cb8a5ca8ab36884064ac4de5175ae82c93edfcb2 (n7.1.5)
 CVE-2026-13859 (Inappropriate implementation in ANGLE in Google Chrome prior to 150.0. ...)
 	{DSA-6378-1 DLA-4672-1}
 	- chromium 150.0.7871.46-1


=====================================
data/DSA/list
=====================================
@@ -436,7 +436,7 @@
 	{CVE-2026-52718 CVE-2026-52719 CVE-2026-53701}
 	[trixie] - gst-plugins-bad1.0 1.26.2-3+deb13u2
 [22 Jun 2026] DSA-6361-1 ffmpeg - security update
-	{CVE-2025-22921 CVE-2026-8461 CVE-2026-30997 CVE-2026-38347 CVE-2026-52296 CVE-2026-52297}
+	{CVE-2025-22921 CVE-2026-8461 CVE-2026-30997 CVE-2026-38347 CVE-2026-52296 CVE-2026-52297 CVE-2026-13858}
 	[trixie] - ffmpeg 7:7.1.5-0+deb13u1
 [21 Jun 2026] DSA-6360-1 squid - security update
 	{CVE-2026-33515 CVE-2026-33526 CVE-2026-47729 CVE-2026-50012}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5ad50550d1095db438bec430d2f920a3033bac9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/c5ad50550d1095db438bec430d2f920a3033bac9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260920/55bf6637/attachment.htm>