[Git][security-tracker-team/security-tracker][master] Add two libheif issues already fixed in unstable

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
644ac5f5 by Salvatore Bonaccorso at 2026-08-20T09:24:40+02:00
Add two libheif issues already fixed in unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2815,9 +2815,14 @@ CVE-2026-62442 (Vulnerability in the Siebel CRM Cloud Applications product of Or
 CVE-2026-62441 (Vulnerability in the Oracle Hyperion Calculation Manager product of Or ...)
 	NOT-FOR-US: Oracle
 CVE-2026-62377 (libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0  ...)
-	TODO: check
+	- libheif 1.23.1-1
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-9ww4-9v47-m7pj
+	NOTE: https://github.com/strukturag/libheif/issues/1844
+	NOTE: Fixed by: https://github.com/strukturag/libheif/commit/e1a0bc1c1ae74f8075eaca30a1cdb2b9bee698d3 (v1.23.1)
 CVE-2026-62291 (libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0  ...)
-	TODO: check
+	- libheif 1.23.1-1
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-xpw3-9rhw-482x
+	NOTE: Fixed by: https://github.com/strukturag/libheif/commit/ac5521ad50399885de96bb6a0733a5d2442740f9 (v1.23.1)
 CVE-2026-61342 (Vulnerability in the Oracle Hyperion Calculation Manager product of Or ...)
 	NOT-FOR-US: Oracle
 CVE-2026-61341 (Vulnerability in the Siebel CRM Cloud Applications product of Oracle S ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/644ac5f5b4ac8d3aebd4ca621a79c7a5d7820d66

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/644ac5f5b4ac8d3aebd4ca621a79c7a5d7820d66
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260820/291a81ab/attachment-0001.htm>