[Git][security-tracker-team/security-tracker][master] new scribus issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fce3d829 by Moritz Muehlenhoff at 2026-11-02T22:57:09+01:00
new scribus issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2030,19 +2030,26 @@ CVE-2026-104623 (A security vulnerability exists in the authorization handling f
 CVE-2026-104615 (A security vulnerability was discovered in SUSE Rancher Fleet's cluste ...)
 	NOT-FOR-US: SuSE software not packaged in Debian
 CVE-2026-104067 (Scribus before 1.6.7 contains an out-of-bounds memory access vulnerabi ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/c6aed467680d04e8ae8e0588579b095acdae40ef
 CVE-2026-104066 (Scribus before 1.6.7 contains a heap buffer overflow vulnerability in  ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
 CVE-2026-104065 (Scribus before 1.6.7 contains an out-of-bounds write vulnerability in  ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/69f52b53c78542b0a5d377fa0b058fb2773799dc
 CVE-2026-104064 (Scribus before 1.6.7 contains an integer overflow vulnerability in the ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/b3e2be4e0f4063991c0b3af1c1447218ed33f0cc
 CVE-2026-104063 (Scribus before 1.6.7 contains an out-of-bounds read vulnerability in t ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
 CVE-2026-104062 (Scribus before 1.6.7 contains a heap buffer overflow vulnerability in  ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/d667b3b1d38e1808721315dc976d67b72070f6b4
 CVE-2026-104061 (Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability ...)
-	TODO: check
+	- scribus <unfixed>
+	NOTE: https://github.com/scribusproject/scribus/commit/cca3e4991dd199c103edb4a3bc5351f5cb88d62b
 CVE-2026-102918 (The Redux Framework plugin for WordPress is vulnerable to Stored Cross ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-102905 (The The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordPre ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fce3d829b2f41389bab2612e4446fb9cac6d3427

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fce3d829b2f41389bab2612e4446fb9cac6d3427
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/7a9d2c3a/attachment.htm>