[Git][security-tracker-team/security-tracker][master] data/dla-needed.txt: Triage gegl for bookworm LTS (CVE-2026-18300)

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3d6ea0fb by Chris Lamb at 2026-08-21T16:09:05-07:00
data/dla-needed.txt: Triage gegl for bookworm LTS (CVE-2026-18300)

- - - - -


1 changed file:

- data/dla-needed.txt


Changes:

=====================================
data/dla-needed.txt
=====================================
@@ -209,6 +209,10 @@ gdal/bullseye
   NOTE: 20260419: Investigate why embded zblib and maybe deemded beginning from sid (rouca/FD)
   NOTE: 20260419: check other zlib CVE (rouca/FD)
 --
+gegl
+  NOTE: 20260821: Added by Front-Desk (lamby)
+  NOTE: 20260821: Not immediately clear how the changes to libs/ctx/ctx.h (not present in bullseye LTS) interact with libs/rgbe/rgbe.c, so this may not be vulnerable in bullseye or earlier. (lamby)
+--
 gh/bookworm
   NOTE: 20241230: Added by Security Team (carnil)
   NOTE: 20260611: bookworm LTS handover.



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d6ea0fb9a684f42c9704d5965666a2bbdcf1650

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d6ea0fb9a684f42c9704d5965666a2bbdcf1650
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260821/c20fdc2c/attachment.htm>