Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
6837b8b5 by Salvatore Bonaccorso at 2026-10-09T18:28:24+02:00
Add CVE-2026-107378/cairosvg
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -689,7 +689,9 @@ CVE-2026-107380 (savg-sanitizer is a PHP SVG/XML sanitizer.
Prior to 1.0.0, svg-
CVE-2026-107379 (savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0,
svg-sanitiz ...)
NOT-FOR-US: darylldoyle svg-sanitizer
CVE-2026-107378 (CairoSVG is an SVG converter based on Cairo, a 2D graphics
library. Pr ...)
- TODO: check
+ - cairosvg 2.9.0-1
+ NOTE:
https://github.com/Kozea/CairoSVG/security/advisories/GHSA-f38f-5xpm-9r7c
+ NOTE: Fixed by:
https://github.com/Kozea/CairoSVG/commit/6dde8685ed3f19837767bce7a13a5491e3d0e0bf
(2.9.0)
CVE-2026-107377 (datamodel-code-generator generates Python data models from
schema defi ...)
TODO: check
CVE-2026-107376 (webonyx graphql-php is a PHP implementation of the GraphQL
specificati ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6837b8b5183d53f12cb5ba3d0837aa8da2744075
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6837b8b5183d53f12cb5ba3d0837aa8da2744075
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
