Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5e036f70 by Salvatore Bonaccorso at 2026-08-21T22:32:49+02:00
Add new vips issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -180,13 +180,25 @@ CVE-2026-71485 (Centrifugo is an open-source scalable
real-time messaging server
CVE-2026-70656 (Checkmate is an open-source, self-hosted tool designed to
track and mo ...)
TODO: check
CVE-2026-70654 (libvips is a fast image processing library with low memory
needs. Prio ...)
- TODO: check
+ - vips 8.18.3-1
+ NOTE:
https://github.com/libvips/libvips/security/advisories/GHSA-rjmm-3qch-m9rg
+ NOTE: https://github.com/libvips/libvips/pull/5038
+ NOTE: Fixed by:
https://github.com/libvips/libvips/commit/80e021c6cdda0f80b756c2109d99839c94c03258
(v8.18.3-rc1)
CVE-2026-70653 (libvips is a fast image processing library with low memory
needs. Prio ...)
- TODO: check
+ - vips 8.18.3-1
+ NOTE:
https://github.com/libvips/libvips/security/advisories/GHSA-fh99-55jf-5hj3
+ NOTE: https://github.com/libvips/libvips/pull/5037
+ NOTE: Fixed by:
https://github.com/libvips/libvips/commit/dc945573e15d598054e701c65b90a35b16b19304
(v8.18.3-rc1)
CVE-2026-70652 (libvips is a fast image processing library with low memory
needs. Prio ...)
- TODO: check
+ - vips 8.18.3-1
+ NOTE:
https://github.com/libvips/libvips/security/advisories/GHSA-h27h-jf9v-m8rg
+ NOTE: https://github.com/libvips/libvips/pull/5039
+ NOTE: Fixed by:
https://github.com/libvips/libvips/commit/cff17794f0698a4f47c74bb31c9700b2c83252a8
(v8.18.3-rc1)
CVE-2026-70651 (libvips is a fast image processing library with low memory
needs. Prio ...)
- TODO: check
+ - vips 8.18.3-1
+ NOTE:
https://github.com/libvips/libvips/security/advisories/GHSA-7p29-wg2h-36q4
+ NOTE: https://github.com/libvips/libvips/pull/5040
+ NOTE: Fixed by:
https://github.com/libvips/libvips/commit/05719ca3d5852acdeb6714de2e8e769c9a5d2c11
(v8.18.3-rc1)
CVE-2026-70105 (Improper input validation in Microsoft Office Word allows an
unauthori ...)
NOT-FOR-US: Microsoft
CVE-2026-69855 (Server-side request forgery (ssrf) in Microsoft Copilot in
Azure allow ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e036f70aed77d333545bfd183e42c6aeef5f9a4
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e036f70aed77d333545bfd183e42c6aeef5f9a4
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
