Your message dated Tue, 03 Nov 2026 12:05:08 +0000
with message-id <[email protected]>
and subject line Bug#1150455: fixed in eog 47.0-1+deb13u1
has caused the Debian Bug report #1150455,
regarding eog: CVE-2026-107651
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1150455: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1150455
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: eog
Version: 50.3-1
X-Debbugs-CC: [email protected]
Severity: important
Tags: security upstream
Forwarded: https://gitlab.gnome.org/GNOME/eog/-/issues/342
Hi,
The following vulnerability was published for eog.
CVE-2026-107651[0]:
| A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow
| exists in the PNG metadata reader due to improper state handling
| when parsing split metadata chunks. A remote attacker could exploit
| this flaw by enticing a user into opening a specially crafted PNG
| file, potentially leading to arbitrary code execution or a Denial of
| Service (DoS) via application crash.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2026-107651
https://www.cve.org/CVERecord?id=CVE-2026-107651
[1] https://gitlab.gnome.org/GNOME/eog/-/issues/342
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: eog
Source-Version: 47.0-1+deb13u1
Done: Moritz Mühlenhoff <[email protected]>
We believe that the bug you reported is fixed in the latest version of
eog, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Moritz Mühlenhoff <[email protected]> (supplier of updated eog package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 23 Oct 2026 23:46:16 +0200
Source: eog
Architecture: source
Version: 47.0-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian GNOME Maintainers
<[email protected]>
Changed-By: Moritz Mühlenhoff <[email protected]>
Closes: 1150455
Changes:
eog (47.0-1+deb13u1) trixie-security; urgency=medium
.
* CVE-2026-107651 (Closes: #1150455)
Checksums-Sha1:
f884e718054b1db1a9475ecf0ebe101921a75e63 2632 eog_47.0-1+deb13u1.dsc
1a026ed24024ce8e80c71bd3842a904bd2d4ba81 4658256 eog_47.0.orig.tar.xz
707c5090123deb09e47ae90f4353a8e3ea8842b8 16944 eog_47.0-1+deb13u1.debian.tar.xz
c9bfc171634b00871b676717dbe5b2c5fca23d76 20729
eog_47.0-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
48cc5cb6215061e5cb122f66f724386da5920d825e93a159ddec253ac3453814 2632
eog_47.0-1+deb13u1.dsc
db5edbf5224d75126a7b7d8ee4e9272a2f30a953331d5baf6d3f3c0ce0cbde66 4658256
eog_47.0.orig.tar.xz
b26809c73e8348baf3a9213272f3187d1a1c12ef6d0c24899cb8e42d7b04c4fb 16944
eog_47.0-1+deb13u1.debian.tar.xz
b6cb4496565f4ac44dbd51450e69e5db4f3a0260b8c483bdbd2c76351f28a4e4 20729
eog_47.0-1+deb13u1_amd64.buildinfo
Files:
dd113be5d4cc617ad6854ff7ad63fdb6 2632 gnome optional eog_47.0-1+deb13u1.dsc
af0f617adbe8eabcdc3a926aae4ddaa7 4658256 gnome optional eog_47.0.orig.tar.xz
12875e58587cf47e8c907c174a206d87 16944 gnome optional
eog_47.0-1+deb13u1.debian.tar.xz
a82607ca9dd2759f2000029a9284d938 20729 gnome optional
eog_47.0-1+deb13u1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmriJYcACgkQEMKTtsN8
Tjbj1BAAoZJNquXUcF9uTIDHC4OwDkI5IambLhiUHhy5i9nij5+8YX1nsUD6Ns6h
EC9SJ69LUIoIUrP9+AT0JoTwWPozzqAAOAdhoDt6Xo5LjHDmaRwcr+ytS+c5O9b4
8E99sccHAx49y9M9esdu5MEjfJQrif0pynC2cTHTo+AE2faJhiSLPhVpEB86XQhG
S2y6A26EDbXIYIDHNrXvvMIMmychGVhHtdRuxFA3AnZh7c/mhFW6j7DtvyS+UDy/
agQ5PE2Z3a1goCDt6ImZ1F1stQ+7Co1oKr90vfddPQHqDSBu9qulT9ny0m/RpQ8b
IyYMO3tTWE+O1MHeVx3KMdyGrG7B20xhIGP/z4NOkEPEe5uDt65dSTrdvtWPSvnP
j1K7+omCKV7bmX0mU11QcsBSGxxNYY4YanmRNF2qwuYdVTuLshWAjVfLBQKUFuJU
HspEtvSheyleI1GnNHafR4rYe84xgs9ltNPla6mzhssFxvIjcD3Kqw0X2b0MTmfR
45AsfHM3Jz0Zo9Y6Iv+8/x46+5ezCwNFLrWA9zsOpEFJ4eke6iZXlMWCa6WRhL3t
mW65dcA9jkt6bzzV+qwE3I2aOyW8w0yAwvuLnqBQpU6Qk31Uo3K9o00tM0Lcmjjt
TZO9kmREnrOa8Tz/u7uVdrkyi1Y99zZU9kZ8ZE4hivu7yQFu2Rg=
=JDKD
-----END PGP SIGNATURE-----
pgpHj5ZPaUQq7.pgp
Description: PGP signature
--- End Message ---
