[Git][security-tracker-team/security-tracker][master] Add CVE-2026-4980/inkscape

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
83ad51b2 by Salvatore Bonaccorso at 2026-03-28T09:38:01+01:00
Add CVE-2026-4980/inkscape

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -27,7 +27,10 @@ CVE-2026-4984 (The Twilio integration webhook handler accepts any POST request w
 CVE-2026-4982 (A user with permission "update world" in any Venueless world is able t ...)
 	NOT-FOR-US: rami.io products
 CVE-2026-4980 (A local file disclosure vulnerability in the XInclude processing compo ...)
-	TODO: check
+	- inkscape 1.4-4
+	NOTE: https://gitlab.com/inkscape/inkscape/-/work_items/3557
+	NOTE: https://gitlab.com/inkscape/inkscape/-/merge_requests/5269
+	NOTE: Fixed by: https://gitlab.com/inkscape/inkscape/-/commit/5b7e540900ebdfa6a5d6c5475193f5025160dbc5 (INKSCAPE_1_3)
 CVE-2026-4976 (A vulnerability was found in Totolink LR350 9.3.5u.6369_B20220309. Thi ...)
 	NOT-FOR-US: TOTOLINK
 CVE-2026-4975 (A vulnerability has been found in Tenda AC15 15.03.05.19. This affects ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ad51b2860393fb77b02df122cda8513c63fd85

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/83ad51b2860393fb77b02df122cda8513c63fd85
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260328/07aa0cee/attachment-0001.htm>