[Git][security-tracker-team/security-tracker][master] three rlottie issues fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e71d7934 by Moritz Muehlenhoff at 2026-06-12T11:28:06+02:00
three rlottie issues fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -6034,13 +6034,13 @@ CVE-2026-47707 (Strawberry GraphQL is a library for creating GraphQL APIs. In ve
 CVE-2026-47706 (Strawberry GraphQL is a library for creating GraphQL APIs. In versions ...)
 	NOT-FOR-US: Strawberry GraphQL
 CVE-2026-47320 (Access of uninitialized pointer, Uncontrolled Recursion vulnerability  ...)
-	- rlottie <unfixed> (bug #1138920)
+	- rlottie 0.1+dfsg-5 (bug #1138920)
 	[trixie] - rlottie <no-dsa> (Minor issue)
 	[bookworm] - rlottie <no-dsa> (Minor issue)
 	[bullseye] - rlottie <postponed> (Minor issue)
 	NOTE: https://github.com/Samsung/rlottie/pull/593
 CVE-2026-47319 (Memory allocation with excessive size value vulnerability in Samsung O ...)
-	- rlottie <unfixed> (bug #1138919)
+	- rlottie 0.1+dfsg-5 (bug #1138919)
 	[trixie] - rlottie <no-dsa> (Minor issue)
 	[bookworm] - rlottie <no-dsa> (Minor issue)
 	[bullseye] - rlottie <postponed> (Minor issue)
@@ -6253,7 +6253,7 @@ CVE-2026-10737 (The SP Project & Document Manager plugin for WordPress is vulner
 CVE-2026-10597 (OMICARD EDM developed by ITPison has a Insecure Direct Object Referenc ...)
 	NOT-FOR-US: ITPison
 CVE-2026-10305 (Out-of-bounds read vulnerability in Samsung Open Source rlottie allows ...)
-	- rlottie <unfixed> (bug #1139179)
+	- rlottie 0.1+dfsg-5 (bug #1139179)
 	[trixie] - rlottie <no-dsa> (Minor issue)
 	[bookworm] - rlottie <no-dsa> (Minor issue)
 	[bullseye] - rlottie <postponed> (Minor issue)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e71d7934abb425d986b2e720d62262169c303085

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e71d7934abb425d986b2e720d62262169c303085
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260612/8d8639e1/attachment.htm>