[Git][security-tracker-team/security-tracker][master] Add two new libheif issues
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sat May 23 08:38:16 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
f2f7fca7 by Salvatore Bonaccorso at 2026-05-23T09:37:58+02:00
Add two new libheif issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -41,9 +41,11 @@ CVE-2026-41074 (RT is an open source, enterprise-grade issue and ticket tracking
- request-tracker4 <not-affected> (Vulnerable code not present)
NOTE: https://github.com/bestpractical/rt/security/advisories/GHSA-265j-qx4w-256j
CVE-2026-41071 (libheif is a HEIF and AVIF file format decoder and encoder. In version ...)
- TODO: check
+ - libheif <unfixed>
+ NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-xj92-xjff-h8w3
CVE-2026-41069 (libheif is a HEIF and AVIF file format decoder and encoder. In version ...)
- TODO: check
+ - libheif <unfixed>
+ NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-p82x-fpmv-576r
CVE-2026-40864 (JupyterHub is software that allows users to create a multi-user server ...)
TODO: check
CVE-2026-40610 (BentoML is a Python library for building online serving systems optimi ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2f7fca7bef1926245b2a5ebadf583f143d83ddf
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f2f7fca7bef1926245b2a5ebadf583f143d83ddf
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260523/54f2c759/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list