[Git][security-tracker-team/security-tracker][master] lts: triage CVE-2026-22693/harfbuzz as postponed

[Emilio Pozuelo Monfort (@pochu)]

Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1d988105 by Emilio Pozuelo Monfort at 2026-01-19T14:30:40+01:00
lts: triage CVE-2026-22693/harfbuzz as postponed

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3115,6 +3115,7 @@ CVE-2026-22693 (HarfBuzz is a text shaping engine. Prior to version 12.3.0, a nu
 	- harfbuzz 12.3.0-4 (bug #1125189)
 	[trixie] - harfbuzz <no-dsa> (Minor issue)
 	[bookworm] - harfbuzz <no-dsa> (Minor issue)
+	[bullseye] - harfbuzz <postponed> (Minor issue)
 	NOTE: https://github.com/harfbuzz/harfbuzz/security/advisories/GHSA-xvjr-f2r9-c7ww
 	NOTE: Fixed by: https://github.com/harfbuzz/harfbuzz/commit/1265ff8d990284f04d8768f35b0e20ae5f60daae
 CVE-2026-22691 (pypdf is a free and open-source pure-python PDF library. Prior to vers ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d9881057505ac484a567c52d6b764e97ba1031f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1d9881057505ac484a567c52d6b764e97ba1031f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260119/588bea8c/attachment.htm>