Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6105acc7 by Moritz Muehlenhoff at 2026-08-13T10:19:02+02:00
new rlottie issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1125,9 +1125,15 @@ CVE-2026-29035 (CivetWeb (commit 4a4f0c95) contains a
heap and stack buffer over
CVE-2026-19594 (Insufficient input sanitization in Snowflake Python API
(`snowflake.co ...)
TODO: check
CVE-2026-19588 (Integer Overflow to Buffer Overflow vulnerability in Samsung
Open Sour ...)
- TODO: check
+ - rlottie <unfixed>
+ [trixie] - rlottie <no-dsa> (Minor issue)
+ NOTE: https://github.com/Samsung/rlottie/pull/600
+ NOTE:
https://github.com/Samsung/rlottie/commit/27f2f23ece8a98f3e0a870e2c125faaac37e8904
CVE-2026-19587 (Uncontrolled Resource Consumption vulnerability in Samsung
Open Source ...)
- TODO: check
+ - rlottie <unfixed>
+ [trixie] - rlottie <no-dsa> (Minor issue)
+ NOTE: https://github.com/Samsung/rlottie/pull/599
+ NOTE:
https://github.com/Samsung/rlottie/commit/34465a9e93c38af9a5287ad28400bb932c1a2a92
CVE-2026-19579 (Snipe-IT before 8.6.0 contains an authorization bypass
(insecure direc ...)
- snipe-it <itp> (bug #1005172)
CVE-2026-19550 (A flaw was found in FreeIPA. The trust-fetch-domains command
is gated ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6105acc7d68287efe0c84fe17ac33e64c48f20fe
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6105acc7d68287efe0c84fe17ac33e64c48f20fe
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
