[Git][security-tracker-team/security-tracker][master] Add new vips issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5e036f70 by Salvatore Bonaccorso at 2026-08-21T22:32:49+02:00
Add new vips issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -180,13 +180,25 @@ CVE-2026-71485 (Centrifugo is an open-source scalable real-time messaging server
 CVE-2026-70656 (Checkmate is an open-source, self-hosted tool designed to track and mo ...)
 	TODO: check
 CVE-2026-70654 (libvips is a fast image processing library with low memory needs. Prio ...)
-	TODO: check
+	- vips 8.18.3-1
+	NOTE: https://github.com/libvips/libvips/security/advisories/GHSA-rjmm-3qch-m9rg
+	NOTE: https://github.com/libvips/libvips/pull/5038
+	NOTE: Fixed by: https://github.com/libvips/libvips/commit/80e021c6cdda0f80b756c2109d99839c94c03258 (v8.18.3-rc1)
 CVE-2026-70653 (libvips is a fast image processing library with low memory needs. Prio ...)
-	TODO: check
+	- vips 8.18.3-1
+	NOTE: https://github.com/libvips/libvips/security/advisories/GHSA-fh99-55jf-5hj3
+	NOTE: https://github.com/libvips/libvips/pull/5037
+	NOTE: Fixed by: https://github.com/libvips/libvips/commit/dc945573e15d598054e701c65b90a35b16b19304 (v8.18.3-rc1)
 CVE-2026-70652 (libvips is a fast image processing library with low memory needs. Prio ...)
-	TODO: check
+	- vips 8.18.3-1
+	NOTE: https://github.com/libvips/libvips/security/advisories/GHSA-h27h-jf9v-m8rg
+	NOTE: https://github.com/libvips/libvips/pull/5039
+	NOTE: Fixed by: https://github.com/libvips/libvips/commit/cff17794f0698a4f47c74bb31c9700b2c83252a8 (v8.18.3-rc1)
 CVE-2026-70651 (libvips is a fast image processing library with low memory needs. Prio ...)
-	TODO: check
+	- vips 8.18.3-1
+	NOTE: https://github.com/libvips/libvips/security/advisories/GHSA-7p29-wg2h-36q4
+	NOTE: https://github.com/libvips/libvips/pull/5040
+	NOTE: Fixed by: https://github.com/libvips/libvips/commit/05719ca3d5852acdeb6714de2e8e769c9a5d2c11 (v8.18.3-rc1)
 CVE-2026-70105 (Improper input validation in Microsoft Office Word allows an unauthori ...)
 	NOT-FOR-US: Microsoft
 CVE-2026-69855 (Server-side request forgery (ssrf) in Microsoft Copilot in Azure allow ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e036f70aed77d333545bfd183e42c6aeef5f9a4

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5e036f70aed77d333545bfd183e42c6aeef5f9a4
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260821/d32e350b/attachment.htm>