[Git][security-tracker-team/security-tracker][master] Add Debian bug reference for CVE-2026-3950/libheif

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
5a2c6427 by Salvatore Bonaccorso at 2026-03-13T21:06:37+01:00
Add Debian bug reference for CVE-2026-3950/libheif

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -723,7 +723,7 @@ CVE-2026-3954 (A weakness has been identified in OpenBMB XAgent 1.0.0. Affected
 CVE-2026-3951 (A security flaw has been discovered in LockerProject Locker 0.0.0/0.0. ...)
 	NOT-FOR-US: LockerProject Locker
 CVE-2026-3950 (A vulnerability was identified in strukturag libheif up to 1.21.2. Thi ...)
-	- libheif <unfixed>
+	- libheif <unfixed> (bug #1130640)
 	[trixie] - libheif <not-affected> (Vulnerable code not present)
 	[bookworm] - libheif <not-affected> (Vulnerable code not present)
 	NOTE: Introduced after: https://github.com/strukturag/libheif/content/16e205f12bfe9a3717ca1d3b447fa83f66bc87e9 (v1.20.0)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5a2c6427276fcb3ce7e483468b807fb3f1b6912d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5a2c6427276fcb3ce7e483468b807fb3f1b6912d
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260313/167f5dad/attachment.htm>