[DSA 6458-1] gst-plugins-bad1.0 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6458-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
August 21, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : gst-plugins-bad1.0
CVE ID         : CVE-2026-12891 CVE-2026-12892 CVE-2026-19387
                 CVE-2026-52720 CVE-2026-52722

Multiple security vulnerabilities were discovered in plugins for
the GStreamer media framework and its codecs and demuxers, which
may result in denial of service or potentially the execution of
arbitrary code if a malformed media file is opened.

For the stable distribution (trixie), these problems have been fixed in
version 1.26.2-3+deb13u3.

We recommend that you upgrade your gst-plugins-bad1.0 packages.

For the detailed security status of gst-plugins-bad1.0 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gst-plugins-bad1.0

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=TiiT
-----END PGP SIGNATURE-----