[Git][security-tracker-team/security-tracker][master] Add CVE-2026-33809/golang-golang-x-image

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
56df15d9 by Salvatore Bonaccorso at 2026-03-28T21:58:44+01:00
Add CVE-2026-33809/golang-golang-x-image

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1482,7 +1482,9 @@ CVE-2026-34085 (fontconfig before 2.17.1 has an off-by-one error in allocation d
 	NOTE: Fixed by: https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/b9bec06d73340f1b5727302d13ac3df307b7febc (2.17.1)
 	NOTE: Introduced by: https://gitlab.freedesktop.org/fontconfig/fontconfig/-/commit/bf3fbad0ffa955a63bc7b515da002d363cf4d5fc (2.17.0)
 CVE-2026-33809 (A maliciously crafted TIFF file can cause image decoding to attempt to ...)
-	TODO: check
+	- golang-golang-x-image 0.38.0-1
+	NOTE: https://github.com/golang/go/issues/78267
+	NOTE: Fixed by: https://github.com/golang/image/commit/23ae9ed61c1d3343fb95015810f62dcbf444976e (v0.38.0)
 CVE-2026-33751 (n8n is an open source workflow automation platform. Prior to versions  ...)
 	NOT-FOR-US: n8n
 CVE-2026-33749 (n8n is an open source workflow automation platform. Prior to versions  ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56df15d90cf87c4e5de0b0e74654842e6a0884a9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/56df15d90cf87c4e5de0b0e74654842e6a0884a9
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260328/7cbbd3ef/attachment.htm>