Source: m17n-lib X-Debbugs-CC: [email protected] Severity: important Tags: security
Hi, The following vulnerability was published for m17n-lib. CVE-2026-109854[0]: | A flaw was found in m17n-lib. An attacker who supplies crafted input | to an application processing ISO-2022 encoded text can cause the | library to read uninitialized memory from the stack. If the | application exposes or returns the decoded output, this flaw can | result in unexpected behavior and limited information disclosure. https://lists.gnu.org/archive/html/m17n-list/2026-10/msg00001.html https://cgit.git.savannah.nongnu.org/cgit/m17n/m17n-lib.git/commit/?id=f3b85087f90189f91c04ba1b62c5f0b879ff2b20 If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-109854 https://www.cve.org/CVERecord?id=CVE-2026-109854 Please adjust the affected versions in the BTS as needed.
