Aron Xu pushed to branch master at Debian Security Tracker / security-tracker
Commits:
4a036843 by Aron Xu at 2026-10-11T19:59:38+08:00
DSA for vips
- - - - -
3 changed files:
- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -256897,7 +256897,6 @@ CVE-2025-59937 (go-mail is a comprehensive library
for sending mails with Go. In
NOT-FOR-US: go-mail
CVE-2025-59933 (libvips is a demand-driven, horizontally threaded image
processing lib ...)
- vips 8.17.3-1 (bug #1117049)
- [trixie] - vips <ignored> (Minor issue)
[bookworm] - vips <ignored> (Minor issue)
[bullseye] - vips <postponed> (minor issue; low impact, workaround
exists)
NOTE:
https://github.com/libvips/libvips/security/advisories/GHSA-q8px-4w5q-c2r4
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[11 Oct 2026] DSA-6552-1 vips - security update
+ {CVE-2025-59933 CVE-2026-33327 CVE-2026-33328 CVE-2026-35590
CVE-2026-35591 CVE-2026-69242 CVE-2026-70651 CVE-2026-70653 CVE-2026-70654}
+ [trixie] - vips 8.16.1-1+deb13u2
[10 Oct 2026] DSA-6551-1 tor - security update
[trixie] - tor 0.4.9.14-0+deb13u1
[10 Oct 2026] DSA-6550-1 ghostscript - security update
=====================================
data/dsa-needed.txt
=====================================
@@ -189,9 +189,6 @@ varnish
vim
Lee Garrett provided an update for review,
<[email protected]>
--
-vips
- Tianyu Chen is interested in working on this update.
---
weechat
Upstream recommends to use branch from
https://github.com/weechat/weechat/commits/4.6/, cf #1142597
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a036843bf6e8e985c33ccae227a7059ee14ea38
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4a036843bf6e8e985c33ccae227a7059ee14ea38
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
