Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
8958a879 by security tracker role at 2026-11-01T07:13:31+00:00
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,61 @@
+CVE-2026-120252 (imagecodecs 2023.1.23 through 2026.10.10 contains a
stack-based buffer ...)
+ TODO: check
+CVE-2026-120251 (imagecodecs 2026.3.6 through 2026.10.10 contains an infinite
loop vuln ...)
+ TODO: check
+CVE-2026-120250 (OpenAlgo 1.0.0.29 before 2.0.3.1 contains an improper
certificate vali ...)
+ TODO: check
+CVE-2026-120249 (Thelia Back-office Default Twig Template before 1.1.1
contains a cross ...)
+ TODO: check
+CVE-2026-120248 (Thelia before 3.1.1 contains a stored cross-site scripting
vulnerabili ...)
+ TODO: check
+CVE-2026-120247 (FFmpeg 2.3 through 9.0.2 contains a use of uninitialized
resource vuln ...)
+ TODO: check
+CVE-2026-120246 (FFmpeg 4.4 through 9.0.2 contains a use of uninitialized
variable vuln ...)
+ TODO: check
+CVE-2026-120245 (FFmpeg 0.10 through 9.0.2 contains a use of uninitialized
resource vul ...)
+ TODO: check
+CVE-2026-120244 (FFmpeg 2.1 through 9.0.2 contains a use of uninitialized
resource vuln ...)
+ TODO: check
+CVE-2026-120243 (FFmpeg 2.0 through 9.0.2 contains a use of uninitialized
variable vuln ...)
+ TODO: check
+CVE-2026-120218 (A flaw has been found in Typemill up to 2.26.0. The impacted
element i ...)
+ TODO: check
+CVE-2026-120217 (A vulnerability was detected in Delgan loguru 0.7.3. The
affected elem ...)
+ TODO: check
+CVE-2026-120198 (A vulnerability has been found in WAVLINK WL-WN530BE1-A
V251117. Affec ...)
+ TODO: check
+CVE-2026-120197 (A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This
impacts ...)
+ TODO: check
+CVE-2026-120196 (A vulnerability was detected in WAVLINK WN579X3-D V250402.
This affect ...)
+ TODO: check
+CVE-2026-120195 (A security vulnerability has been detected in WAVLINK
WL-WN579A3-A 202 ...)
+ TODO: check
+CVE-2026-120192 (A security vulnerability has been detected in Presenton up to
0.9.11-b ...)
+ TODO: check
+CVE-2026-120191 (A weakness has been identified in Presenton up to
0.9.11-beta. Affecte ...)
+ TODO: check
+CVE-2026-120190 (A security flaw has been discovered in PostyBirb Plus up to
3.1.75. Af ...)
+ TODO: check
+CVE-2026-120189 (A vulnerability was identified in D-Link DIR-505 1.10B02.
Affected is ...)
+ TODO: check
+CVE-2026-120185 (A security flaw has been discovered in ken678 YznCMS up to
2.2.0. The ...)
+ TODO: check
+CVE-2026-120135 (Uncontrolled Recursion vulnerability in Apache Thrift Java
bindings. ...)
+ TODO: check
+CVE-2026-118636 (**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in
the MINA 3. ...)
+ TODO: check
+CVE-2026-118168 (The MapPress WordPress plugin before 2.97.15 does not
restrict which ...)
+ TODO: check
+CVE-2026-115946 (XS::libbrotli versions before 1.2.1.0 for Perl bundle a
brotli library ...)
+ TODO: check
+CVE-2026-113482 (The Media Library Assistant WordPress plugin before 3.44 does
not esca ...)
+ TODO: check
+CVE-2026-113481 (The Media Library Assistant WordPress plugin before 3.44 does
not chec ...)
+ TODO: check
+CVE-2026-107343 (The Kali Forms \u2014 Contact Form & Drag-and-Drop Builder
WordPress p ...)
+ TODO: check
+CVE-2026-107342 (The Kali Forms \u2014 Contact Form & Drag-and-Drop Builder
WordPress p ...)
+ TODO: check
CVE-2026-96554 (The BuddyBoss Platform plugin for WordPress is vulnerable to
Stored Cr ...)
NOT-FOR-US: WordPress plugin
CVE-2026-78192 (WebDyne versions from 2.022 before 3.022 for Perl disclose
application ...)
@@ -9527,11 +9585,13 @@ CVE-2026-116162 (Parse Server before 8.6.104 and 9.0.0
before 9.10.5-alpha.5 sav
CVE-2026-116161 (Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4
contains a ...)
NOT-FOR-US: Parse Server
CVE-2026-116160 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a heap-b ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/09b961e05cdb7caeb923e1736caa340ac26c84ea
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/26c52536a73ae1056f97de62823e1ce7cafb27dc
(6.9.13-58)
CVE-2026-116159 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/68168e6e5617e4cc478452777586e408f542362b
(7.1.2-33)
@@ -9543,6 +9603,7 @@ CVE-2026-116158 (ImageMagick before 7.1.2-33 contains a
memory leak vulnerabilit
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8980924dff771df8286cd5311ba0d2c9ef1902ca
(7.1.2-33)
NOTE: im7 only see
https://github.com/ImageMagick/ImageMagick6/issues/486#issuecomment-6541983797
CVE-2026-116157 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in Pe ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/eef3af56fbc2dc607e185b8565d695a8d8032d73
(7.1.2-33)
@@ -9554,11 +9615,13 @@ CVE-2026-116156 (ImageMagick before 6.9.13-58 and 7.x
before 7.1.2-33 contains a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9108482a07ca08620021853a14133b9bc6e77054
(7.1.2-33)
NOTE: operation is im7 only
CVE-2026-116155 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d8d635ecc52aec6553d96dcf5ca34cab81293a17
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/29876f3e3febec4a9806ed5936a66f18971ce319
(6.9.13-58)
CVE-2026-116154 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/33d16f3cf4e0439bba4a874e14c5a3168726ed68
(7.1.2-33)
@@ -9576,36 +9639,43 @@ CVE-2026-116152 (ImageMagick before 7.1.2-33 contains a
memory leak vulnerabilit
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/62c7876c37347dee0be1872e623650ba59f8a541
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/af510e976301c2516aaa26ea8f88318450eeece2
(7.1.2-33)
CVE-2026-116151 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/b41a6bc92ac778e0459ce500e9d64fb361e29fd5
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/25166220935dc564e7b98f418e3c417a70063a26
(6.9.13-58)
CVE-2026-116150 (ImageMagick before 7.1.2-33 contains a memory leak
vulnerability in th ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/a63bdd29ebe8439d1bfa51ca4e7890b8b4742560
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/f4454af87ec1be4d6a7f4590c55c1accab779b92
(6.9.13-58)
CVE-2026-116149 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a stack- ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/cf40ce974c3f780b7f6913bcff7bec27087c9104
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9b4d4e065a8518ad90d095ea1a91e6f19c008686
(6.9.13-58)
CVE-2026-116148 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
an injec ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/59071d53ae13542174f99f81e59cca076bd5d70e
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/99212a03987a09e7945ff379f06a4f33f673baa2
(6.9.13-58)
CVE-2026-116147 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a null p ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v5f5-4v9x-p3f2
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d4069fe50be320cf7ab25261e516b176f36fc02f
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/09fe506ea85e6808e50d8902e2fcc13e5b8ffcdb
(6.9.13-58)
CVE-2026-116146 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j657-rmv3-4m94
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/64645a7e72cf597de471dce016f3496c1e29c17a
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/118209bf0db6024e60a2aac498a6da0bd519aa7d
(6.9.13-58)
CVE-2026-116145 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains
a securi ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9
NOTE: Fixed by: [1/3]
https://github.com/ImageMagick/ImageMagick/commit/a75aab27367c4a0e57e137eb6cc5369001c85aec
(7.1.2-33)
@@ -9614,11 +9684,13 @@ CVE-2026-116145 (ImageMagick before 6.9.13-58 and 7.x
before 7.1.2-32 contains a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/04579d04ae3d53df87af858c5ee7a6e815794a51
(6.9.13-58)
NOTE: See CVE-2026-105083
CVE-2026-116144 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
uncontro ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x258-xjqf-6j3f
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/8911876f1e1e8f69cf1c1dd8f9a69685c8b776ae
(7.1.2-33)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/249ceda100c543c08fc4431246d9b07f83146425
(6.9.13-58)
CVE-2026-116143 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains
a policy ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fp46-842c-2v83
NOTE: Fixed by: [1/2]
https://github.com/ImageMagick/ImageMagick/commit/3d96f305edff25c2ce6792c72d5f6987c8a5a961
(7.1.2-33)
@@ -9637,6 +9709,7 @@ CVE-2026-116141 (ImageMagick before 7.1.2-33 contains a
policy bypass vulnerabil
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/d1402c213c06d06f2e006e9ff433050774093677
(7.1.2-33)
NOTE: UHDR coder introduced by:
https://github.com/ImageMagick/ImageMagick/commit/4b85373fcd4de75118c0bb62266b66f8245906ec
(7.1.1-30)
CVE-2026-116140 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33
incorrectly parse ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-528x-2384-jmxp
NOTE: Fixed by: [1/4]
https://github.com/ImageMagick/ImageMagick/commit/453568d7d98a409681374ffacaf2edf2cd53c1f3
(7.1.2-33)
@@ -31179,6 +31252,7 @@ CVE-2026-109966 (yt-dlp-web-ui through 4.0.0 contains
an argument injection vuln
CVE-2026-109965 (Serena before 2.0.0 contains an improper link resolution
vulnerability ...)
NOT-FOR-US: Serena
CVE-2026-109964 (ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap
buffer under ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w
NOTE:
https://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900
(7.1.2-33)
@@ -33314,11 +33388,13 @@ CVE-2026-109280 (ImageMagick 7.1.0-20 before 7.1.2-32
contains a use after free
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fb743d60700c9bc350c3d2a0b48b998bdabc466c
(7.1.2-32)
CVE-2026-109279 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks
proper sync ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/12db6f04e895deae4537ead10c771a244607794a
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/9ddc71abea5cbe7d18164fa0f0077a105cab514f
(6.9.13-57)
CVE-2026-109278 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/15892fc0dc050a3693e28a214478a8d8488d648c
(7.1.2-32)
@@ -33329,11 +33405,13 @@ CVE-2026-109277 (ImageMagick before 7.1.2-32 contains
a policy bypass vulnerabil
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/ce92ae07c2ca2c20c131eaf6da6da734c1cafce0
(7.1.2-32)
CVE-2026-109276 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an incom ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/b2d579d20cc503185b6e8b0bc2dfb520b7bce58a
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3875281ca0c5aa67b2bf0454725abf177c706b3b
(6.9.13-57)
CVE-2026-109275 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a code i ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6cfb8d8c65bb0aba49903589b444f45ea074a226
(7.1.2-32)
@@ -33344,6 +33422,7 @@ CVE-2026-109274 (ImageMagick before 7.1.2-32 contains a
time-of-check time-of-us
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/9e789499e67dbf5c4ee9fe1b72690738c799ec73
(7.1.2-32)
CVE-2026-109273 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/5a5c2e51948fcc5d85b8d832938e2c1b4db4a699
(7.1.2-32)
@@ -33369,21 +33448,25 @@ CVE-2026-109270 (ImageMagick before 7.1.2-32 contains
a memory leak vulnerabilit
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/da4cfd78a2ceea4cf54207834f9d60c1b9c38797
(7.1.2-32)
NOTE: im7 only:
https://github.com/ImageMagick/ImageMagick6/issues/483#issuecomment-6517576657
CVE-2026-109269 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an infor ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/aa104ff2e408bea23828e7a7a346f9080da4104b
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/acf52477cf05c5ff9c8315d44043589a5190a408
(6.9.13-57)
CVE-2026-109268 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a use af ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/3285d692ebf200e9cbeff59d1ccc00caab99ad54
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/966e227a1a8b520ea1652e2eb3ca78b08d3206f5
(6.9.13-57)
CVE-2026-109267 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a stack ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-462x-739v-qvq2
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/507aee2308046b25e251d0be1a5371327bb79683
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/c10823904b251d07fe79346a7136b0af295d451b
(6.9.13-57)
CVE-2026-109266 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an XML i ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3429-f84m-8qhw
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/45bb7328b36c163234f5ccb7f1d494b7c4c8c775
(7.1.2-32)
@@ -33394,16 +33477,19 @@ CVE-2026-109265 (ImageMagick 7.1.1-7 before 7.1.2-32
contains a heap buffer over
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/7605c7619da77a5ff1ccf4ec159f3ec782c6bda7
(7.1.2-32)
CVE-2026-109264 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
uncontro ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/6ff963c14ccb5fefb4eb8654c8b0219033df2b20
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/d4f06dcca7ad99d639af85bc347ad9fdfdcec8e2
(6.9.13-57)
CVE-2026-109263 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5
(6.9.13-57)
CVE-2026-109262 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/2eff6be3785d980bb5190244ad432fe6282d29e3
(7.1.2-32)
@@ -33415,11 +33501,13 @@ CVE-2026-109261 (ImageMagick before 6.9.13-57 and 7.x
before 7.1.2-32 contains a
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/1c7763266cfedc635005a965169bc2ddcc650221
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/93aa075f0fa5a6ae6a83a63acc7c84283aa6d31b
(6.9.13-57)
CVE-2026-109260 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
a memory ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/fd1b9c85f2634e34034d39016ed7542ac0a19930
(7.1.2-32)
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick6/commit/55346382cebdf5c5fa6c544a7df7ae4910ffb090
(6.9.13-57)
CVE-2026-109259 (ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains
an unini ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1150802)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8
NOTE: Fixed by: [1/4]
https://github.com/ImageMagick/ImageMagick/commit/df199b79f0a1c87ca009e431f03cb387af160f77
(7.1.2-32)
@@ -33746,6 +33834,7 @@ CVE-2026-105274 (Improper Handling of Highly Compressed
Data (Data Amplification
NOTE: Introduced by:
https://github.com/hexpm/hex/commit/671f695ac548ed01f5828c2a739ecaa942b21007
(v2.1.0)
NOTE: Fixed by:
https://github.com/hexpm/hex/commit/d8b60eee97abb119d525306f048969a217d793a5
(v2.5.2)
CVE-2026-105081 (ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not
properly ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997
NOTE: Fixed by:
https://github.com/ImageMagick/ImageMagick/commit/c73f7913f72b8d97fe89f4094eefdc8d34edf5a9
(7.1.2-33)
@@ -36739,10 +36828,12 @@ CVE-2026-107660 (FFmpeg before 8.1.3 and 9.x before
9.0.2 contains an improper c
NOTE: Fixed by:
https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/0cd2a70eacd510c2efed48b9fc177c7cb2bc549f
(n8.1.3)
NOTE: mbedtls not enabled in Debian builds
CVE-2026-118475 (A flaw was found in Eye of GNOME. When parsing a specially
crafted PNG ...)
+ {DLA-4874-1}
- eog 50.4-1
NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
NOTE: Fixed by:
https://gitlab.gnome.org/GNOME/eog/-/commit/04e4f313421eacb9fc529781542bb7fb81a3cd1a
(50.4)
CVE-2026-107651 (A flaw was found in Eye of GNOME (eog). A heap-based buffer
overflow e ...)
+ {DLA-4874-1}
- eog 50.4-1 (bug #1150455)
NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2547986
NOTE: https://gitlab.gnome.org/GNOME/eog/-/issues/342
@@ -42848,6 +42939,7 @@ CVE-2026-11399 (The Helpdesk Support Ticket System for
WooCommerce plugin for Wo
CVE-2026-105090 (Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS.
The surv ...)
NOT-FOR-US: Formbricks
CVE-2026-105083 (ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy
bypass vul ...)
+ {DLA-4875-1}
- imagemagick 8:7.1.2.33+dfsg1-1 (bug #1149969)
[trixie] - imagemagick <no-dsa> (Minor issue)
NOTE:
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j
@@ -85328,7 +85420,8 @@ CVE-2026-84450 (libheif is a HEIF and AVIF file format
decoder and encoder. From
{DSA-6523-1}
- libheif 1.23.3-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-gh5q-69gg-c964
-CVE-2026-120208 [GHSA-x8r2-mggj-j6wr: Heap buffer overflow in unci
mixed-interleave decoding with unequal chroma bit depths]
+CVE-2026-120208 (libheif 1.18.0 before 1.23.3 contains a heap-based buffer
overflow vul ...)
+ {DSA-6523-1}
- libheif 1.23.3-1
NOTE:
https://github.com/strukturag/libheif/security/advisories/GHSA-x8r2-mggj-j6wr
NOTE: Fixed by:
https://github.com/strukturag/libheif/commit/9d3cd91d7b1c8c68deef6d06057ab956bcb0dfb9
(v1.23.3)
@@ -123130,6 +123223,7 @@ CVE-2026-69244 (AIOHTTP is an asynchronous HTTP
client/server framework for asyn
NOTE: https://github.com/aio-libs/aiohttp/pull/13223
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d
(v3.14.3)
CVE-2026-69243 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.3-1 (bug #1143597)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v
@@ -125330,6 +125424,7 @@ CVE-2026-5582 (The FuseWP plugin for WordPress is
vulnerable to Cross-Site Reque
CVE-2026-5219 (Cross-Site request forgery (CSRF) vulnerability in Softtr
Information ...)
NOT-FOR-US: E-Commerce Pack
CVE-2026-59881 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.3-1 (bug #1143160)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mq44-7p77-q5h7
@@ -162414,11 +162509,13 @@ CVE-2026-54282 (Starlette is a lightweight ASGI
framework/toolkit. Prior to 1.3.
NOTE: https://github.com/Kludex/starlette/pull/3326
NOTE: Fixed by:
https://github.com/Kludex/starlette/commit/167b5850e809f38b27fbfed62d58bf6442855975
(1.3.0)
CVE-2026-54280 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.1-1
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9x8q-7h8h-wcw9
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/a762eda5242f6490d6ba667533193f8b473ad587
(v3.14.1)
CVE-2026-54279 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.1-1
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-2fqr-mr3j-6wp8
@@ -162432,6 +162529,7 @@ CVE-2026-54278 (AIOHTTP is an asynchronous HTTP
client/server framework for asyn
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/4f7480e474cccc6a8cc2c92ad3f17a31dedf8232
(v3.14.1)
NOTE: Major rewrite in:
https://github.com/aio-libs/aiohttp/commit/b502ae655c8788b469dcc832923a85d661719699
(v3.14.0)
CVE-2026-54277 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.1-1
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-63hw-fmq6-xxg2
@@ -162453,6 +162551,7 @@ CVE-2026-54275 (AIOHTTP is an asynchronous HTTP
client/server framework for asyn
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-4m7w-qmgq-4wj5
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/0ca2b6c28a25726527a8b60f25960262a91ed0e0
(v3.14.1)
CVE-2026-54274 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.1-1
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-xcgm-r5h9-7989
@@ -162571,6 +162670,7 @@ CVE-2026-50555 (Angular is a development platform for
building mobile and deskto
- angular.js <undetermined>
NOTE:
https://github.com/angular/angular/security/advisories/GHSA-hqr9-c56f-3x7
CVE-2026-50269 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.0-1
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-m6qw-4cw2-hm4m
@@ -175655,6 +175755,7 @@ CVE-2026-48595 (Improper Handling of Case Sensitivity
vulnerability in elixir-te
CVE-2026-48594 (Improper Handling of Highly Compressed Data (Data
Amplification) vulne ...)
- elixir-tesla <itp> (bug #960541)
CVE-2026-47265 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.0-1 (bug #1138780)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-hg6j-4rv6-33pg
@@ -175697,6 +175798,7 @@ CVE-2026-35202 (Pterodactyl is a free, open-source
game server management panel.
CVE-2026-35049 (wire-ios is an iOS client for the Wire secure messaging
application. P ...)
NOT-FOR-US: wire-ios
CVE-2026-34993 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
+ {DLA-4876-1}
- python-aiohttp 3.14.0-1 (bug #1138781)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8
@@ -215811,38 +215913,38 @@ CVE-2026-34529 (File Browser is a file managing
interface for uploading, deletin
CVE-2026-34528 (File Browser is a file managing interface for uploading,
deleting, pre ...)
NOT-FOR-US: File Browser
CVE-2026-34525 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-c427-h43c-vf67
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/e00ca3cca92c465c7913c4beb763a72da9ed8349
(v3.13.4)
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/53e2e6fc58b89c6185be7820bd2c9f40216b3000
(v3.13.5)
CVE-2026-34520 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-63hf-3vf5-4wqf
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/9370b9714a7a56003cacd31a9b4ae16eab109ba4
(v3.13.4)
CVE-2026-34519 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mwh4-6h8g-pg8w
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/53b35a2f8869c37a133e60bf1a82a1c01642ba2b
(v3.13.4)
CVE-2026-34518 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-966j-vmvw-g2g9
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/5351c980dcec7ad385730efdf4e1f4338b24fdb6
(v3.13.4)
CVE-2026-34517 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-3wq7-rqq7-wx6j
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/cbb774f38330563422ca0c413a71021d7b944145
(v3.13.4)
CVE-2026-34516 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-m5qp-6w8w-w647
@@ -215852,13 +215954,13 @@ CVE-2026-34515 (AIOHTTP is an asynchronous HTTP
client/server framework for asyn
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-p998-jp59-783m
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/0ae2aa076c84573df83fc1fdc39eec0f5862fe3d
(v3.13.4)
CVE-2026-34514 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-2vrm-gr82-f7m5
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/9a6ada97e2c6cf1ce31727c6c9fcea17c21f6f06
(v3.13.4)
CVE-2026-34513 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-hcc4-c3v8-rx92
@@ -215882,7 +215984,7 @@ CVE-2026-2862 (IBM Verify Identity Access Container
11.0 through 11.0.2 and IBM
CVE-2026-2475 (IBM Verify Identity Access Container 11.0 through 11.0.2 and
IBM Secur ...)
NOT-FOR-US: IBM
CVE-2026-22815 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.5-1 (bug #1132582)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-w2fm-2cpv-w7v5
@@ -254997,18 +255099,18 @@ CVE-2025-11723 (The Appointment Booking Calendar
\u2014 Simply Schedule Appointm
CVE-2025-11370 (The Popup and Slider Builder by Depicter \u2013 Add Email
collecting P ...)
NOT-FOR-US: WordPress plugin
CVE-2025-69225 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1 DLA-4613-1}
+ {DSA-6241-1 DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mqqc-3gqh-h2x8
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/c7b7a044f88c71cefda95ec75cdcfaa4792b3b96
(v3.13.3)
CVE-2025-69224 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1 DLA-4613-1}
+ {DSA-6241-1 DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-69f9-5gxw-wvc2
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/32677f2adfd907420c078dda6b79225c6f4ebce0
(v3.13.3)
NOTE: Regression fix:
https://github.com/aio-libs/aiohttp/commit/be0278388d206682fb246fbf550f2d003f22cf93
(master)
CVE-2025-69226 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1 DLA-4613-1}
+ {DSA-6241-1 DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-54jq-c3m8-4m76
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/f2a86fd5ac0383000d1715afddfa704413f0711e
(v3.13.3)
@@ -255021,23 +255123,23 @@ CVE-2025-69230 (AIOHTTP is an asynchronous HTTP
client/server framework for asyn
NOTE: Introduced with:
https://github.com/aio-libs/aiohttp/commit/24e030b7125d84d016e2e2ad05803102973c7dbf
(v3.13.0)
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/64629a0834f94e46d9881f4e99c41a137e1f3326
(v3.13.3)
CVE-2025-69229 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1 DLA-4613-1}
+ {DSA-6241-1 DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-g84x-mcqj-x9qq
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/dc3170b56904bdf814228fae70a5501a42a6c712
(v3.13.3)
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/4ed97a4e46eaf61bd0f05063245f613469700229
(v3.13.3)
CVE-2025-69227 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1 DLA-4613-1}
+ {DSA-6241-1 DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259
(v3.13.3)
CVE-2025-69228 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1 DLA-4613-1}
+ {DSA-6241-1 DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6jhg-hg63-jvvf
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/b7dbd35375aedbcd712cbae8ad513d56d11cce60
(v3.13.3)
CVE-2025-69223 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DSA-6241-1}
+ {DSA-6241-1 DLA-4876-1}
- python-aiohttp 3.13.3-1
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-6mq8-rvhq-8wgg
NOTE: Fixed by:
https://github.com/aio-libs/aiohttp/commit/2b920c39002cee0ec5b402581779bbaaf7c9138a
(v3.13.3)
@@ -317801,7 +317903,7 @@ CVE-2025-53640 (Indico is an event management system
that uses Flask-Multipass,
CVE-2025-3621 (Vulnerabilities* in ActADUR local server product, developed and
mainta ...)
NOT-FOR-US: ActADUR
CVE-2025-53643 (AIOHTTP is an asynchronous HTTP client/server framework for
asyncio an ...)
- {DLA-4613-1}
+ {DLA-4876-1 DLA-4613-1}
- python-aiohttp 3.12.15-1 (bug #1109336)
[trixie] - python-aiohttp <no-dsa> (Minor issue)
NOTE:
https://github.com/aio-libs/aiohttp/security/advisories/GHSA-9548-qrrj-x5pj
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8958a879a26040a3ebd031196c459805cc4683a8
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8958a879a26040a3ebd031196c459805cc4683a8
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
