[Git][security-tracker-team/security-tracker][master] Add new libheif issues without CVE assigned yet (but apparently pending)

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b7cdc75c by Salvatore Bonaccorso at 2026-11-01T15:59:01+01:00
Add new libheif issues without CVE assigned yet (but apparently pending)

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,48 @@
+CVE-2026-XXXX [GHSA-xwcv-cp39-m2w4]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-xwcv-cp39-m2w4
+CVE-2026-XXXX [GHSA-jx54-6rm6-2cgj]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-jx54-6rm6-2cgj
+CVE-2026-XXXX [GHSA-fpr5-xpfr-vcq3]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-fpr5-xpfr-vcq3
+CVE-2026-XXXX [GHSA-35mc-3887-rr37]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-35mc-3887-rr37
+CVE-2026-XXXX [GHSA-hpg4-g2gc-pq42]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-hpg4-g2gc-pq42
+CVE-2026-XXXX [GHSA-9rpf-2x22-78m9]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-9rpf-2x22-78m9
+CVE-2026-XXXX [GHSA-48p4-gj45-w9v6]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-48p4-gj45-w9v6
+CVE-2026-XXXX [GHSA-2g6j-vhr6-6wrj]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-2g6j-vhr6-6wrj
+CVE-2026-XXXX [GHSA-7qm8-hj35-269r]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-7qm8-hj35-269r
+CVE-2026-XXXX [GHSA-hhg3-fxg7-3gxw]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-hhg3-fxg7-3gxw
+CVE-2026-XXXX [GHSA-73j7-gvm9-x8q6]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-73j7-gvm9-x8q6
+CVE-2026-XXXX [GHSA-74mj-m37q-h3q9]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-74mj-m37q-h3q9
+CVE-2026-XXXX [GHSA-rcqc-842v-m26h]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-rcqc-842v-m26h
+CVE-2026-XXXX [GHSA-pfcm-ffqg-84hx]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-pfcm-ffqg-84hx
+CVE-2026-XXXX [GHSA-gff5-3vgr-p8h2]
+	- libheif <unfixed>
+	NOTE: https://github.com/strukturag/libheif/security/advisories/GHSA-gff5-3vgr-p8h2
 CVE-2026-13575
 	NOT-FOR-US: HTTP::Session Perl module
 CVE-2026-111426



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7cdc75c4a776ee13ea93c521323aacccbdd017e

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b7cdc75c4a776ee13ea93c521323aacccbdd017e
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261101/34332542/attachment-0001.htm>