Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
2f0f406f by Salvatore Bonaccorso at 2026-03-13T20:56:20+01:00
Update status for CVE-2026-3950/libheif
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -724,6 +724,9 @@ CVE-2026-3951 (A security flaw has been discovered in
LockerProject Locker 0.0.0
NOT-FOR-US: LockerProject Locker
CVE-2026-3950 (A vulnerability was identified in strukturag libheif up to
1.21.2. Thi ...)
- libheif <unfixed>
+ [trixie] - libheif <not-affected> (Vulnerable code not present)
+ [bookworm] - libheif <not-affected> (Vulnerable code not present)
+ NOTE: Introduced after:
https://github.com/strukturag/libheif/content/16e205f12bfe9a3717ca1d3b447fa83f66bc87e9
(v1.20.0)
NOTE: https://github.com/strukturag/libheif/issues/1715
CVE-2026-3949 (A vulnerability was determined in strukturag libheif up to
1.21.2. Thi ...)
- libheif <unfixed> (unimportant)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f0f406f50adc3190edbeac9f3ebf27204622ac8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2f0f406f50adc3190edbeac9f3ebf27204622ac8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
