Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5ea09d0c by Salvatore Bonaccorso at 2026-09-25T22:35:54+02:00
Add CVE-2026-88387/libraw
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -236,7 +236,10 @@ CVE-2026-88389 (Espruino 2v29 (commit bffc6d0) contains a
NULL pointer dereferen
CVE-2026-88388 (Espruino 2v29 (commit bffc6d0) contains a stack-based buffer
overflow ...)
NOT-FOR-US: Espruino
CVE-2026-88387 (LibRaw 0.22.0 contains an incorrect numeric conversion
vulnerability i ...)
- TODO: check
+ - libraw <unfixed>
+ NOTE: https://github.com/LibRaw/LibRaw/issues/844
+ NOTE: https://github.com/LibRaw/LibRaw/pull/853
+ NOTE: Fixed by:
https://github.com/LibRaw/LibRaw/commit/b41cbbd61951783e0440590dae55411a16185bdf
(master)
CVE-2026-88386 (libsndfile 1.2.2 contains a misaligned memory access issue in
psf_binh ...)
TODO: check
CVE-2026-87722 (Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in
regex search ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ea09d0c4bfbea11ba3493399d902bb537514527
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5ea09d0c4bfbea11ba3493399d902bb537514527
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
