[Git][security-tracker-team/security-tracker][master] Add two new libheif issues

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sat May 23 08:38:16 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f2f7fca7 by Salvatore Bonaccorso at 2026-05-23T09:37:58+02:00
Add two new libheif issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -41,9 +41,11 @@ CVE-2026-41074 (RT is an open source, enterprise-grade issue and ticket tracking
 	- request-tracker4 <not-affected> (Vulnerable code not present)
 	NOTE: https://github.com/bestpractical/rt/security/advisories/GHSA-265j-qx4w-256j
 CVE-2026-41071 (libheif is a HEIF and AVIF file format decoder and encoder. In version ...)
-	TODO: check
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-xj92-xjff-h8w3
 CVE-2026-41069 (libheif is a HEIF and AVIF file format decoder and encoder. In version ...)
-	TODO: check
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-p82x-fpmv-576r
 CVE-2026-40864 (JupyterHub is software that allows users to create a multi-user server ...)
 	TODO: check
 CVE-2026-40610 (BentoML is a Python library for building online serving systems optimi ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2f7fca7bef1926245b2a5ebadf583f143d83ddf

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2f7fca7bef1926245b2a5ebadf583f143d83ddf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260523/54f2c759/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list