[Git][security-tracker-team/security-tracker][master] new rlottie issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
6105acc7 by Moritz Muehlenhoff at 2026-08-13T10:19:02+02:00
new rlottie issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1125,9 +1125,15 @@ CVE-2026-29035 (CivetWeb (commit 4a4f0c95) contains a heap and stack buffer over
 CVE-2026-19594 (Insufficient input sanitization in Snowflake Python API (`snowflake.co ...)
 	TODO: check
 CVE-2026-19588 (Integer Overflow to Buffer Overflow vulnerability in Samsung Open Sour ...)
-	TODO: check
+	- rlottie <unfixed>
+	[trixie] - rlottie <no-dsa> (Minor issue)
+	NOTE: https://github.com/Samsung/rlottie/pull/600
+	NOTE: https://github.com/Samsung/rlottie/commit/27f2f23ece8a98f3e0a870e2c125faaac37e8904
 CVE-2026-19587 (Uncontrolled Resource Consumption vulnerability in Samsung Open Source ...)
-	TODO: check
+	- rlottie <unfixed>
+	[trixie] - rlottie <no-dsa> (Minor issue)
+	NOTE: https://github.com/Samsung/rlottie/pull/599
+	NOTE: https://github.com/Samsung/rlottie/commit/34465a9e93c38af9a5287ad28400bb932c1a2a92
 CVE-2026-19579 (Snipe-IT before 8.6.0 contains an authorization bypass (insecure direc ...)
 	- snipe-it <itp> (bug #1005172)
 CVE-2026-19550 (A flaw was found in FreeIPA. The trust-fetch-domains command is gated  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6105acc7d68287efe0c84fe17ac33e64c48f20fe

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/6105acc7d68287efe0c84fe17ac33e64c48f20fe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260813/2c49c8b1/attachment.htm>