[Git][security-tracker-team/security-tracker][master] Add CVE-2026-78475/gimp

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0bfb1587 by Salvatore Bonaccorso at 2026-08-24T21:22:28+02:00
Add CVE-2026-78475/gimp

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7,7 +7,9 @@ CVE-2026-8173 (The web GUI of affected Murrelektronik Xelity switches logs MAC a
 CVE-2026-78541 (A stored OS command injection vulnerability exists in the parent-contr ...)
 	NOT-FOR-US: TPLink
 CVE-2026-78475 (A flaw was found in the file-pix (ESM) plugin in GIMP. When processing ...)
-	TODO: check
+	- gimp <unfixed>
+	NOTE: https://gitlab.gnome.org/GNOME/gimp/-/work_items/16580
+	NOTE: Fixed by: https://gitlab.gnome.org/GNOME/gimp/-/commit/27d83534e637cf160f913ac6d6388d5a5555e9d8
 CVE-2026-78465 (A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit buil ...)
 	TODO: check
 CVE-2026-78417 (Insufficient verification of data authenticity in the IronVNC client i ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0bfb1587e8071ed20f11dff524b99e088ac28cf0

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0bfb1587e8071ed20f11dff524b99e088ac28cf0
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260824/91cdcb14/attachment.htm>