[Git][security-tracker-team/security-tracker][master] Add CVE-2026-18300/gegl

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b4a874d7 by Salvatore Bonaccorso at 2026-08-21T08:58:41+02:00
Add CVE-2026-18300/gegl

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -517,7 +517,9 @@ CVE-2026-18302 (GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Exe
 CVE-2026-18301 (GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerabi ...)
 	TODO: check
 CVE-2026-18300 (GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerabi ...)
-	TODO: check
+	- gegl <unfixed>
+	NOTE: https://www.zerodayinitiative.com/advisories/ZDI-26-453/
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gegl/-/commit/d3d262008299341c5b032b354021632ceadb2799
 CVE-2026-18299 (GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerabili ...)
 	TODO: check
 CVE-2026-18298 (GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Exec ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4a874d75c977995a8cc79e3b903491fb497df2d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b4a874d75c977995a8cc79e3b903491fb497df2d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260821/b7a66d81/attachment-0001.htm>