[Git][security-tracker-team/security-tracker][master] new vlc issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
46abc937 by Moritz Muehlenhoff at 2026-09-30T19:23:08+02:00
new vlc issue

- - - - -


2 changed files:

- data/CVE/list
- data/DSA/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -322,7 +322,9 @@ CVE-2026-102877 (Fider before 0.38.0 contains a server-side request forgery vuln
 CVE-2026-102876 (SurrealDB before 3.3.0 contains an authorization bypass in HTTP sessio ...)
 	NOT-FOR-US: SurrealDB
 CVE-2026-102875 (VLC media player before 3.0.24 contains a path traversal vulnerability ...)
-	TODO: check
+	- vlc 3.0.24-1
+	NOTE: https://code.videolan.org/videolan/vlc/-/commit/59934edbd03c6c1147d75d6c91e96633b710ec31 (3.0.24-rc1)
+	NOTE: https://code.videolan.org/videolan/vlc/-/commit/8d43e99c2c01d9aab3ecad00e7a102806262b06b (3.0.24-rc1)
 CVE-2026-102874 (A vulnerability was identified in HKUDS AnyTool 0.1.0. Affected is the ...)
 	TODO: check
 CVE-2026-102847 (A flaw has been found in gedelumbung HospitalManagement up to c2d45543 ...)


=====================================
data/DSA/list
=====================================
@@ -47,7 +47,7 @@
 	{CVE-2026-39919}
 	[trixie] - ghostscript 10.05.1~dfsg-1+deb13u2
 [25 Sep 2026] DSA-6515-1 vlc - security update
-	{CVE-2026-56711 CVE-2026-73324}
+	{CVE-2026-56711 CVE-2026-73324 CVE-2026-102875}
 	[trixie] - vlc 3.0.24-0+deb13u1
 [25 Sep 2026] DSA-6514-1 php8.4 - security update
 	{CVE-2025-1218 CVE-2025-14181 CVE-2026-6103 CVE-2026-91765 CVE-2026-91766 CVE-2026-91767 CVE-2026-91768 CVE-2026-91769 CVE-2026-92842 CVE-2026-93682}



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46abc937fa897996b216f6c793e32a585db82095

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/46abc937fa897996b216f6c793e32a585db82095
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260930/52b88e80/attachment.htm>