OPENSUSE-SU-2026:21689-1: gstreamer-devtools&distro=openSUSE Leap 16.0 openSUSE

Published

Published 30-08-2026Last modified 31-08-2026

Vulnerability summary

OPENSUSE-SU-2026:21689-1 is a vulnerability in gstreamer-devtools&distro=openSUSE Leap 16.0 openSUSE with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6

CVE-2025-4574 CVE-2025-58160 CVE-2026-25541 CVE-2026-25727 CVE-2026-72813 CVE-2026-72814

Timeline

30-08-2026
PublishedVulnerability first disclosed.
31-08-2026
Last modifiedVulnerability information updated.

Description

Security update for gstreamer-devtools This update for gstreamer-devtools fixes the following issues: - CVE-2025-4574: crossbeam-channel: internal `Channel` type's `Drop` method has a race condition that can lead to a double-free and memory corruption (bsc#1243178). - CVE-2025-58160: tracing-subscriber: untrusted user input containing ANSI escape sequences can be injected into terminal output when logged and lead to terminal manipulation (bsc#1249015). - CVE-2026-25541: bytes: integer overflow in `BytesMut:reserve` can lead to undefined behavior and crashes (bsc#1274306). - CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257914). - CVE-2026-72813: actix-files: empty `Range` header in GET requests for static files can lead to a process crash (bsc#1275210). - CVE-2026-72814: actix-files: non-existing folders passed as an argument to the `actix_files::Files::new()` method can lead to information disclosure (bsc#1275209).